Total vulnerabilities in the database
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
| Software | From | Fixed in |
|---|---|---|
| checkpoint / firewall-1 | 3.0 | 3.0.x |
| checkpoint / firewall-1 | 4.1-sp1 | 4.1-sp1.x |
| checkpoint / firewall-1 | 4.1 | 4.1.x |
| checkpoint / firewall-1 | 4.0 | 4.0.x |