Vulnerability in Checkpoint Firewall-1
CVE-2001-1171
Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.
EPSS: 0.003 (27.1th percentile) — read the EPSS interpretation.
Affected products
- Checkpoint Firewall-1 — versions 3.0b
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)