Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0757. PoCs published by Jim Becher.
AI-analyzed exploit summary This exploit targets an information leakage vulnerability in Check Point Firewall-1 by connecting to ports 264 or 256 and sending specific byte sequences to retrieve internal network IP addresses. The code iterates over a range of IP addresses to identify vulnerable hosts.
Description
Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet.
Exploits (1)
This exploit targets an information leakage vulnerability in Check Point Firewall-1 by connecting to ports 264 or 256 and sending specific byte sequences to retrieve internal network IP addresses. The code iterates over a range of IP addresses to identify vulnerable hosts.