CVE-2001-0940

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-09-21 · updated 2026-06-16

Description

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name.

Affected products

checkpoint Firewall-1: 4.0, 4.1

References

http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html
http://marc.info/?l=bugtraq&m=100094268017271&w=2
http://marc.info/?l=bugtraq&m=100698954308436&w=2
http://www.checkpoint.com/techsupport/alerts/buffer_overflow.html
http://www.osvdb.org/1951
http://www.securityfocus.com/bid/3336
https://exchange.xforce.ibmcloud.com/vulnerabilities/7145
http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html
http://marc.info/?l=bugtraq&m=100094268017271&w=2
http://marc.info/?l=bugtraq&m=100698954308436&w=2

Get alerted when CVE-2001-0940 or the next vulnerability affects your stack