Vulnerability record · CVE-2001-1101 · published 8 September 2001

CVE-2001-1101: Checkpoint firewall-1 vulnerability

Checkpoint · Firewall 1

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.

6.4 CVSS 2.0 Medium EPSS 1.5% · top 27.1%

6.4CVSS 2.0 base score

1.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Firewall 1 Checkpoint

References

Link	Tags
http://www.securityfocus.com/archive/1/212826	PatchVendor Advisory
http://www.securityfocus.com/bid/3303	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095
http://www.securityfocus.com/archive/1/212826	PatchVendor Advisory
http://www.securityfocus.com/bid/3303	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095

Track CVE-2001-1101 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0469Checkpoint firewall-1 vulnerabilityBuffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG …EPSS 5.0%7 Jul 2004 10.0CVE-2004-0040Checkpoint firewall-1 vulnerabilityStack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows…EPSS 7.6%3 Mar 2004 10.0CVE-2004-0039Checkpoint firewall-1 vulnerabilityMultiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point F…EPSS 9.3%3 Mar 2004 7.8CVE-2005-3673Checkpoint check point vulnerabilityThe Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain c…EPSS 4.9%18 Nov 2005 7.8CVE-2004-2679Checkpoint firewall-1 vulnerabilityCheck Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (I…EPSS 1.5%31 Dec 2004 7.5CVE-2004-0079Cisco firewall services module null pointer dereference vulnerabilityThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) vi…EPSS 9.5%23 Nov 2004 7.5CVE-2004-0699Checkpoint firewall-1 vulnerabilityHeap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers …EPSS 5.9%28 Sep 2004 7.5CVE-2002-0428Checkpoint check point vpn vulnerabilityCheck Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire v…EPSS 1.6%12 Aug 2002

Source: NIST National Vulnerability Database (record CVE-2001-1101), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.