CVE-2000-0582

Description

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy.

Affected products

• checkpoint / firewall-14.0 – 4.0
• checkpoint / firewall-14.1 – 4.1

Exploits & proofs of concept

• exploit-dbCheck Point Software Firewall-1 4.0/1.4.1 - Resource Exhaustion (Denial of Service)by SecureXpert Labs

References

• MISChttp://www.checkpoint.com/techsupport/alerts/list_vun.html#SMTP_Security
• MISChttp://www.osvdb.org/1438
• MISChttp://www.securityfocus.com/bid/1416
• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630162106.4619C-100000%40fjord.fscinternet.com