Unscored CVE-2000-1032 EUVD-2000-1019GHSA-2pf5-35fc-x4fg

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames ver…

Published Jan 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.

References

20001101 Re: Samba 2.0.7 SWAT vulnerabilities mailing-list
fw1-login-response(5816) vdb-entry
1632 vdb-entry
1890 vdb-entry