Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-1037. PoCs published by Gregory Duchemin, Nelson Brito.
AI-analyzed exploit summary This script exploits a vulnerability in Check Point Firewall-1 Session Agent (CVE-2000-1037) by performing brute-force attacks, password recovery, and DoS attacks against the authentication mechanism. It interacts with the Session Agent on port 261 to extract credentials or disrupt service.
Description
Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.
Exploits (2)
This script exploits a vulnerability in Check Point Firewall-1 Session Agent (CVE-2000-1037) by performing brute-force attacks, password recovery, and DoS attacks against the authentication mechanism. It interacts with the Session Agent on port 261 to extract credentials or disrupt service.
This Perl script exploits a brute-force vulnerability in Check Point Firewall-1 Session Agent by repeatedly attempting usernames from a file until a valid one is found. It listens on port 261 and interacts with the agent's authentication prompts.