VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2001· Updated Jun 16, 2026

CVE-2001-1499

CVE-2001-1499

Description

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

Affected products

2
  • Checkpoint/VPN 12 versions
    cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*
    • (no CPE)range: = 4.1 SP4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.