10

CVE-2004-0039

EPSS 41.48%
Published 03.03.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Checkpoint ≫ Firewall-1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	41.48%	0.971

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://marc.info/?l=bugtraq&m=107604682227031&w=2

http://www.checkpoint.com/techsupport/alerts/security_server.html

http://www.ciac.org/ciac/bulletins/o-072.shtml

http://www.kb.cert.org/vuls/id/790771

Patch

Third Party Advisory

US Government Resource

http://www.securityfocus.com/bid/9581

Patch

Vendor Advisory

http://www.us-cert.gov/cas/techalerts/TA04-036A.html

US Government Resource

http://xforce.iss.net/xforce/alerts/id/162

https://exchange.xforce.ibmcloud.com/vulnerabilities/14149

https://nvd.nist.gov/vuln/detail/CVE-2004-0039

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0039

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0039

EUVD