CVE-2004-0039

Description

Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

46.94

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-1999-1204 ,CVE-2000-1201 ,CVE-2004-0039 ,CVE-2006-3885 are affected in firewall-1 r55w-hfa2	NCM
Vulnerabilities CVE-1999-1204 ,CVE-2000-1201 ,CVE-2004-0039 ,CVE-2006-3885 are affected in firewall-1 r55w-hfa1	NCM
Vulnerabilities CVE-1999-1204 ,CVE-2000-1201 ,CVE-2004-0039 ,CVE-2006-3885 are affected in firewall-1 r55w	NCM
Vulnerabilities CVE-1999-1204 ,CVE-2000-1201 ,CVE-2001-1158 ,CVE-2004-0039 are affected in firewall-1 4.1_build_41439	NCM
Vulnerabilities CVE-1999-1204 ,CVE-2000-1201 ,CVE-2001-1171 ,CVE-2004-0039 are affected in firewall-1 3.0b	NCM
Vulnerabilities CVE-2000-1201 ,CVE-2001-1101 ,CVE-2001-1102 ,CVE-2004-0039 are affected in firewall-1 3.0	NCM
Vulnerabilities CVE-2003-0757 ,CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-2679 are affected in firewall-1 4.1-sp5	NCM
Vulnerabilities CVE-2003-0757 ,CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-2679 are affected in firewall-1 4.1-sp4	NCM
Vulnerabilities CVE-2003-0757 ,CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-2679 are affected in firewall-1 4.1-sp3	NCM
Vulnerabilities CVE-2003-0757 ,CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-2679 are affected in firewall-1 4.1-sp2	NCM
Vulnerabilities CVE-2003-0757 ,CVE-2004-0039 ,CVE-2004-2679 are affected in firewall-1 4.0	NCM
Vulnerabilities CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-0699 ,CVE-2004-2679 are affected in firewall-1 4.1-sp6	NCM
Vulnerabilities CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-2679 are affected in firewall-1 4.1-sp5a	NCM
Vulnerabilities CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-2679 are affected in firewall-1 4.1-sp1	NCM
Vulnerabilities CVE-2004-0039 ,CVE-2004-0040 ,CVE-2004-2679 are affected in firewall-1 4.1	NCM
CVE-2004-0039	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234