CVE-2000-0150

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.kb.cert.org/vuls/id/328867US Government Resource
http://www.osvdb.org/4417
http://www.securityfocus.com/bid/979
http://www.kb.cert.org/vuls/id/328867US Government Resource
http://www.osvdb.org/4417
http://www.securityfocus.com/bid/979

Timeline

Published: Feb 12, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01516.2GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.CVE-2000-01525.0Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.CVE-2000-01535.0FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.CVE-2000-01541.2The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-01557.2Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to exe CVE-2000-01565.1Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Imag CVE-2000-01577.2NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.CVE-2000-01587.5Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.CVE-2000-01597.5HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow a CVE-2000-01607.6The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components withou CVE-2000-01617.5Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to ex CVE-2000-01625.1The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that