CVEvulnerability
CVE-2001-1499
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.
Affected configurations
• checkpoint vpn-1 4.1
References
- http://www.osvdb.org/20210 www.osvdb.org
- http://www.securityfocus.com/archive/1/222366 www.securityfocus.com
- http://www.securityfocus.com/archive/1/222479 www.securityfocus.com
- http://www.securityfocus.com/bid/3470 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7343 exchange.xforce.ibmcloud.com
- http://www.osvdb.org/20210 www.osvdb.org
- http://www.securityfocus.com/archive/1/222366 www.securityfocus.com
- http://www.securityfocus.com/archive/1/222479 www.securityfocus.com
- http://www.securityfocus.com/bid/3470 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7343 exchange.xforce.ibmcloud.com