CVE-2001-1158: High severity checkpoint firewall-1 vulnerability
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1158?
CVE-2001-1158 is considered a critical vulnerability due to its potential to allow remote attackers to bypass firewall restrictions.
How do I fix CVE-2001-1158?
To fix CVE-2001-1158, it is recommended to upgrade to the patched version of Check Point FireWall-1 that addresses this vulnerability.
Which versions of Check Point FireWall-1 are affected by CVE-2001-1158?
CVE-2001-1158 affects version 4.1 and version 4.1 with service pack 2 of Check Point FireWall-1.
What kind of attack can be executed using CVE-2001-1158?
An attacker can use forged RDP headers to bypass intended restrictions on UDP port 259 of arbitrary hosts due to CVE-2001-1158.
Is there a workaround for CVE-2001-1158?
There are no effective workarounds for CVE-2001-1158, so upgrading the software is the recommended solution.