CVE-1999-1204 Information

Description

Check Point Firewall-1 does not properly handle certain restricted keywords (e.g. Mail auth time) in user-defined objects which could produce a rule with a default \ANY\ address and result in access to more systems than intended by the administrator.

Reference

http://marc.info/?l=bugtraq&m=90221101925912&w=2 http://www.checkpoint.com/techsupport/config/keywords.html http://www.osvdb.org/4416 https://exchange.xforce.ibmcloud.com/vulnerabilities/7293

Share on: