CVE Feed

    Dashboard / CVE / CVE-2001-1499

    CVE-2001-1499

    Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

    Published:Dec 31, 2001
    Last Modified:Apr 16, 2026
    EPS:Jun 21, 2005
    EPSS Score:0.00698
    CVSS Score:5

    Affected Products

    Vendor
    Checkpoint
    Product
    Vpn-1

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2011-1827 (CVSS 9.3) — Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint …
    CVE-2008-5849 (CVSS 5) — Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote att…
    CVE-2008-1397 (CVSS 6.5) — Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated user…
    CVE-2006-0255 (CVSS 7.2) — Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain p…
    CVE-2005-3673 (CVSS 7.8) — The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to …
    CVE-2004-0699 (CVSS 7.5) — Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE i…
    CVE-2004-0469 (CVSS 10) — Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/Fir…
    CVE-2004-0081 (CVSS 5) — OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to c…
    CVE-2004-0079 (CVSS 7.5) — The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers …
    CVE-2004-0112 (CVSS 5) — The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High