CVE-2001-1101

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-09-08 · updated 2026-06-16

Description

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.

Affected products

checkpoint Firewall-1: 3.0, 4.0, 4.1, 4.1-sp1, 4.1-sp2

References

http://www.securityfocus.com/archive/1/212826
http://www.securityfocus.com/bid/3303
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095
http://www.securityfocus.com/archive/1/212826
http://www.securityfocus.com/bid/3303
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095

Get alerted when CVE-2001-1101 or the next vulnerability affects your stack