Back to search
CVE-2004-0039
Published: Feb 11, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20040204 Checkpoint Firewall-1 HTTP Parsing Format String Vulnerabilities
third-party-advisory
x_refsource_ISS
VU#790771
third-party-advisory
x_refsource_CERT-VN
20040205 Two checkpoint fw-1/vpn-1 vulns
mailing-list
x_refsource_BUGTRAQ
fw1-format-string(14149)
vdb-entry
x_refsource_XF
O-072
third-party-advisory
government-resource
x_refsource_CIAC
http://www.checkpoint.com/techsupport/alerts/security_server.html
x_refsource_CONFIRM
9581
vdb-entry
x_refsource_BID
TA04-036A
third-party-advisory
x_refsource_CERT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now