Description
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
References
- 2952 vdb-entry
- 20010709 Check Point FireWall-1 RDP Bypass Vulnerability mailing-list
- 20010712 RDP Bypass workaround for VPN-1/FireWall 4.1 SPx vendor-advisory
- VU#310295 third-party-advisory
- CA-2001-17 third-party-advisory
- L-109 third-party-advisory government-resource
- 20010709 Check Point response to RDP Bypass mailing-list
- 1884 vdb-entry
- fw1-rdp-bypass(6815) vdb-entry