Checkpoint Firewall-1 Valid Username Vulnerability
BID:1890
Info
Checkpoint Firewall-1 Valid Username Vulnerability
| Bugtraq ID: | 1890 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Nov 01 2000 12:00AM |
| Updated: | Nov 01 2000 12:00AM |
| Credit: | This vulnerability was first reported to Bugtraq by Ryan Gray <[email protected]> on November 1, 2000. |
| Vulnerable: |
Check Point Software Firewall-1 4.0 Check Point Software Firewall-1 3.0 |
| Not Vulnerable: | |
Exploit / POC
Checkpoint Firewall-1 Valid Username Vulnerability
If a valid username and invalid password is used:
User: validuser
FireWall-1 password: ******
Access denied by FireWall-1 authentication
User:
###################################
And if an invalid username is used:
User: invaliduser
User someuser not found
User:
###################################
If a valid username and invalid password is used:
User: validuser
FireWall-1 password: ******
Access denied by FireWall-1 authentication
User:
###################################
And if an invalid username is used:
User: invaliduser
User someuser not found
User:
###################################