Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Check Point FW-1 HTTP Security Server多个远程格式串漏洞
Vulnerability Description
Check Point Firewall-1是一款高性能防火墙,Check Point Firewall-1的应用智能(AI)组件是一个能对应用层攻击进行通信扫描的应用代理。早期版本包含的HTTP Security Server,提供类似的功能。 Check Point Firewall-1包含的AI和HTTP Security server对部分HTTP请求处理不正确,远程攻击者可以利用这个漏洞以管理员权限执行任意命令,这允许攻击者控制防火墙。 AI和HTTP安全服务器包含的HTTP解析功能可通过发送非
CVSS Information
N/A
Vulnerability Type
N/A