Vulnerability in Checkpoint Firewall-1
CVE-2001-1102
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
EPSS: 0.003 (22.2th percentile) — read the EPSS interpretation.
Affected products
- Checkpoint Firewall-1 — versions 3.0, 4.0, 4.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)