CVE-2001-1101

Опубликовано: 08 сент. 2001

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.

Ссылки

http://www.securityfocus.com/archive/1/212826
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3303
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095
http://www.securityfocus.com/archive/1/212826
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3303
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*

cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*

cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*

cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*

cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00638

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-v2xx-6ch2-qjrp

github

больше 3 лет назад