Lucene search
MitreCVE-2002-2405HistoryNov 01, 2007 - 5:00 p.m.
CVE-2002-2405
2007-11-0117:00:00
CWE-264
mitre
web.nvd.nist.gov
35
cve-2002-2405
check point
firewall-1
next generation
userauth
proxy
http
https
ftp
security vulnerability
remote attack
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
52.2%
Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
Affected configurations
Node
checkpointfirewall-1Match4.1
ORcheckpointfirewall-1Matchng
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:* |
| checkpoint | firewall-1 | ng | cpe:2.3:a:checkpoint:firewall-1:ng:*:*:*:*:*:*:* |
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
52.2%
Related for CVE-2002-2405