EIP-2026-118354

This Perl script exploits a vulnerability in Check Point Firewall-1 Session Agent (prior to FW-1 4.1) by impersonating the firewall module to trick users into revealing their credentials. It connects to the agent on port 261 and sends crafted messages to prompt for and capture username/password in cleartext.