Vulnerability Details CVE-2002-2405
Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.8%
CVSS Severity
CVSS v2 Score 4.9
References
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html
- http://www.iss.net/security_center/static/10139.php
- http://www.securityfocus.com/bid/5744
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html
- http://www.iss.net/security_center/static/10139.php
- http://www.securityfocus.com/bid/5744
Products affected by CVE-2002-2405
-
cpe:2.3:a:checkpoint:firewall-1:4.1
-
cpe:2.3:a:checkpoint:firewall-1:ng