Vulnerability Details CVE-2000-1032
The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.osvdb.org/1632
- http://www.securityfocus.com/archive/1/142808
- http://www.securityfocus.com/bid/1890
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5816
- http://www.osvdb.org/1632
- http://www.securityfocus.com/archive/1/142808
- http://www.securityfocus.com/bid/1890
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5816
Products affected by CVE-2000-1032
-
cpe:2.3:a:checkpoint:firewall-1:3.0
-
cpe:2.3:a:checkpoint:firewall-1:4.0