CVE-2001-1101

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/212826Patch, Vendor Advisory
http://www.securityfocus.com/bid/3303Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095
http://www.securityfocus.com/archive/1/212826Patch, Vendor Advisory
http://www.securityfocus.com/bid/3303Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7095

Timeline

Published: Sep 8, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-11026.2Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy CVE-2001-11037.5FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, CVE-2001-11047.5SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.CVE-2001-11057.5RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attac CVE-2001-11067.5The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwo CVE-2001-11075.0SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the ser CVE-2001-11087.5Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the re CVE-2001-11097.5Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the CVE-2001-11105.0EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which c CVE-2001-11114.6EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.CVE-2001-11127.5Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of ch CVE-2001-111310.0Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories