QwikSec

Security Database

CVE

CWE

Training

CVE-1999-1204

Published: Mar 9, 2002

Modified: Aug 1, 2024

PUBLISHED

Description

Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_OSVDB

http://www.checkpoint.com/techsupport/config/keywords.html

x_refsource_CONFIRM

fw1-user-defined-keywords-access(7293)

vdb-entry

x_refsource_XF

19980511 Firewall-1 Reserved Keywords Vulnerability

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.