CVE-2000-0804 Security feature bypass in n/a

High 7.5 Published 22 Jan 2001 Updated 8 Aug 2024

Remote attackers can bypass firewall directionality checks using fragmented or reopened TCP connections, allowing unauthorized network access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2000-0804?

CVE-2000-0804 is a high-severity vulnerability in n/a, published on 22 Jan 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."

Which versions are affected by CVE-2000-0804?

It affects 1 product.

Products include Checkpoint Firewall-1.

How do I fix CVE-2000-0804?

No fix has been published for CVE-2000-0804 yet. Limit exposure of the affected software until one is available.

Is CVE-2000-0804 being exploited?

There is no known exploitation of CVE-2000-0804 in the wild and no public exploit code.

Sources

Also known as GHSA-p3r3-w3mg-3rp5.