Iss Warns Of Holes In Check Point Firewall...

FYI…

ISS warns of holes in Check Point firewall, VPN server

- http://www.nwfusion.com/news/2004/0205isswarns.html
02/05/04
"Users of Check Point firewalls need to upgrade them right away in order to shut down a vulnerability that can lead to the firewalls being taken over by attackers. A second vulnerability to Check Point's VPN-1 can leave it similarly vulnerable…Because Check Point firewalls by some counts represent more than half of the firewalls in corporate networks, ISS regards the threat as critical and says it calls for immediate fixes. Updates necessary to correct the firewall vulnerability are available…Check Point says it no longer supports Version 4.1, so there will be no patch issued for it. The firewall vulnerability is to its application proxy for HTTP called HTTP Security Server. Check Point's advisory says the vulnerability can cause the server to crash and allow further exploitation…"

>>> - http://www.checkpoint.com/techsupport/aler…ity_server.html

- :wtf:

FYI…from the Internet Storm Center:

- http://isc.sans.org/diary.html?date=2004-02-05
"…Unfortunately we have found that many of the Internet search engines will locate installations of Firewall-1 if the HTTP proxy is active. This puts those sites at extreme risk for attack if they are not quickly updated…"

-