CVE-2001-1499 - CVE House

Back to Database

Status published Medium CVE-2001-1499

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages...

5 CVSS

Vulnerability Description

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-1499

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from checkpoint

View All →

Local privilege escalation in Harmony SASE Windows Agent

Information Disclosure in Identity Agent Debug Files

Information Disclosure in Identity Agent Registry Keys

Exposed SFTP server

Lack of TLS validation

Affected Vendor

checkpoint

View all reports →

Affected Software

vpn-1

Vulnerable Versions:

4.1

Timeline

Official Publish: June 21st, 2005

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.