Description
Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
References
- 5744 vdb-entry
- 20020918 Firewall-1 HTTP Security Server - Proxy vulnerability mailing-list
- fw1-http-proxy-bypass(10139) vdb-entry