Every CVE Search/ Get API key

CVE-2001-1102

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary...

6.2 Medium

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.

Exploit likelihood

0.30%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.2

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.

Record
CVE-2001-1102
CVSS 2.0
6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.

Record
CVE-2001-1102
Updated
2026-11-02
EUVDEUVD-2001-1083 No score

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.

Record
EUVD-2001-1083
Updated
2026-11-03
GitHub AdvisoriesGHSA-5rfj-cxjw-j8wv No score

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary...

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.

Record
GHSA-5rfj-cxjw-j8wv
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1102 is a medium vulnerability (CVSS 6.2) in Checkpoint Firewall-1, published September 8, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. No source names a fixed version.

References

MoveEnter Open