CVE - CVE-2009-1227

CVE-ID
CVE-2009-1227	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
DISPUTED NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624. NOTE: the vendor has disputed this issue, stating "Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers." In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue "was discovered during a pen-test where the client would not allow further analysis."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:34286 URL:http://www.securityfocus.com/bid/34286 BUGTRAQ:20090330 Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow URL:http://www.securityfocus.com/archive/1/502256/100/0/threaded EXPLOIT-DB:8313 URL:https://www.exploit-db.com/exploits/8313 FULLDISC:20090330 Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow URL:http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html SECTRACK:1021948 URL:http://www.securitytracker.com/id?1021948
Assigning CNA
MITRE Corporation
Date Record Created
20090402	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090402)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)