Vulnerability in Checkpoint Firewall-1

CVE-2001-1431

Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third packet of a TCP three-way handshake to use the NAT IP address, which allows remote attackers to gain sensitive information.

EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.

Affected products

Checkpoint Firewall-1 — versions 4.1
Checkpoint Vpn-1 — versions 4.1
Nokia Firewall_appliance — versions ipso_3.3, ipso_3.4, ipso_3.41
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)