Vulnerability Details CVE-2001-1499
Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.osvdb.org/20210
- http://www.securityfocus.com/archive/1/222366
- http://www.securityfocus.com/archive/1/222479
- http://www.securityfocus.com/bid/3470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7343
- http://www.osvdb.org/20210
- http://www.securityfocus.com/archive/1/222366
- http://www.securityfocus.com/archive/1/222479
- http://www.securityfocus.com/bid/3470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7343
Products affected by CVE-2001-1499
-
cpe:2.3:a:checkpoint:vpn-1:4.1