CVE-2001-1499: Medium severity Checkpoint Vpn-1 vulnerability

Published Dec 31, 2001

Updated

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

Affected Software

1 affected component

Checkpoint Vpn-1=4.1-sp4

Event History

Dec 31, 2001

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1499?

CVE-2001-1499 is considered a medium severity vulnerability due to its potential for enabling brute force attacks.

How do I fix CVE-2001-1499?

To fix CVE-2001-1499, consider upgrading to a later version of Check Point VPN-1 that addresses this issue.

What types of attacks can CVE-2001-1499 enable?

CVE-2001-1499 can enable remote attackers to conduct brute force attacks on user credentials.

Which version of Check Point VPN-1 is affected by CVE-2001-1499?

CVE-2001-1499 specifically affects Check Point VPN-1 version 4.1 SP4.

Is CVE-2001-1499 specific to any authentication methods?

Yes, CVE-2001-1499 highlights that the varying error messages depend on the authentication method used, providing hints to attackers.