Vulnerability Description
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Checkpoint | Firewall-1 | 3.0 |
References
- http://www.osvdb.org/1212
- http://www.securityfocus.com/bid/954
- http://www.osvdb.org/1212
- http://www.securityfocus.com/bid/954
FAQ
What is CVE-2000-0116?
CVE-2000-0116 is a vulnerability with a CVSS score of 7.5 (HIGH). Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
How severe is CVE-2000-0116?
CVE-2000-0116 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2000-0116?
Check the references section above for vendor advisories and patch information. Affected products include: Checkpoint Firewall-1.