CVE-2001-1431
Published Oct 8, 2001
Last updated 7 years ago
Overview
- Description
- Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third packet of a TCP three-way handshake to use the NAT IP address, which allows remote attackers to gain sensitive information.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"
},
{
"criteria": "cpe:2.3:a:checkpoint:firewall-1:4.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60536AAF-76BC-4773-98FA-5F01E2D231FB"
},
{
"criteria": "cpe:2.3:a:checkpoint:firewall-1:4.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E4206C4-05A7-46D1-90C7-6BA7744C7AD9"
},
{
"criteria": "cpe:2.3:a:checkpoint:vpn-1:4.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9754CCE-CEC5-4359-9C62-133885817DEF"
},
{
"criteria": "cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C65FC343-69C9-4B70-8149-42297B47C813"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nokia:firewall_appliance:ipso_3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B11266A-90C4-47B9-B6DD-77F1B4701708"
},
{
"criteria": "cpe:2.3:h:nokia:firewall_appliance:ipso_3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E24EF8C6-E623-4B37-96D6-D514ECE365B4"
},
{
"criteria": "cpe:2.3:h:nokia:firewall_appliance:ipso_3.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F781F5B-B875-4119-937B-97286E746C91"
}
],
"operator": "OR"
}
]
}
]