Back to CVE Browser

CVE-2004-0039

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0110%

EPSS Percentile20.58th

PublishedMar 3, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.

Affected Platforms (CPE)

📦

Checkpoint

Firewall 1

All versions

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107604682227031&w=2

🔗 http://www.checkpoint.com/techsupport/alerts/security_server.html

🔗 http://www.ciac.org/ciac/bulletins/o-072.shtml

🔗 http://www.kb.cert.org/vuls/id/790771

🔗 http://www.securityfocus.com/bid/9581

🔗 http://www.us-cert.gov/cas/techalerts/TA04-036A.html

🔗 http://xforce.iss.net/xforce/alerts/id/162

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/14149

Related Vulnerabilities

CVE-2018-010110.0

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could ...

CVE-2018-403110.0

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the w...

CVE-2017-234310.0

The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to ...

CVE-2019-1302010.0

The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse....