Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2004-0039

EPSS 46.94% · P98
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-0039

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Check Point FW-1 HTTP Security Server多个远程格式串漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Check Point Firewall-1是一款高性能防火墙，Check Point Firewall-1的应用智能(AI)组件是一个能对应用层攻击进行通信扫描的应用代理。早期版本包含的HTTP Security Server，提供类似的功能。 Check Point Firewall-1包含的AI和HTTP Security server对部分HTTP请求处理不正确，远程攻击者可以利用这个漏洞以管理员权限执行任意命令，这允许攻击者控制防火墙。 AI和HTTP安全服务器包含的HTTP解析功能可通过发送非
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2004-0039

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0039

Please Login to view more intelligence information

Same Patch Batch · n/a · 2004-02-11 · 4 CVEs total

CVE-2002-1575MIT CGIEmail任意邮件接收中继漏洞
CVE-2003-0818Microsoft Internet Explorer多个安全漏洞(MS03-048)
CVE-2004-0103Linley Henzell Dungeon Crawl未明本地缓冲区区溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-0039

No comments yet

Leave a comment