CVE

Id
8467  
CVE No.
CVE-2004-0039  
Status
Candidate  
Description
Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.  
Phase
Modified (20050818)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Wall | NOOP(1) Cox  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
51632 8467 CVE-2004-0039 ISS:20040204 Checkpoint Firewall-1 HTTP Parsing Format String Vulnerabilities  View
51633 8467 CVE-2004-0039 URL:http://xforce.iss.net/xforce/alerts/id/162  View
51634 8467 CVE-2004-0039 BUGTRAQ:20040205 Two checkpoint fw-1/vpn-1 vulns  View
51635 8467 CVE-2004-0039 URL:http://marc.info/?l=bugtraq&m=107604682227031&w=2  View
51636 8467 CVE-2004-0039 CONFIRM:http://www.checkpoint.com/techsupport/alerts/security_server.html  View
51637 8467 CVE-2004-0039 CERT:TA04-036A  View
51638 8467 CVE-2004-0039 URL:http://www.us-cert.gov/cas/techalerts/TA04-036A.html  View
51639 8467 CVE-2004-0039 CERT-VN:VU#790771  View
51640 8467 CVE-2004-0039 URL:http://www.kb.cert.org/vuls/id/790771  View
51641 8467 CVE-2004-0039 CIAC:O-072  View
51642 8467 CVE-2004-0039 URL:http://www.ciac.org/ciac/bulletins/o-072.shtml  View
51643 8467 CVE-2004-0039 XF:fw1-format-string(14149)  View
51644 8467 CVE-2004-0039 URL:http://xforce.iss.net/xforce/xfdb/14149  View
51645 8467 CVE-2004-0039 BID:9581  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62692 JVNDB-2004-000033 Check Point VPN-1/Firewall-1 の ISAKMP パケット処理におけるバッファオーバーフローの脆弱性 Check Point VPN-1/Firewall-1 の VPN コンポーネントである VPN-1 サーバには、ISAKMP パケット内の証明書要求ペイロードに対するチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0040 8467 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000033.html  View