## Description

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### checkpoint - firewall-1

Affected Versions:

- 3.0

### checkpoint - firewall-1

Affected Versions:

- 4.0

### cisco - pix_firewall_software

Affected Versions:

- 4.1\(6\)

### cisco - pix_firewall_software

Affected Versions:

- 4.1\(6b\)

### cisco - pix_firewall_software

Affected Versions:

- 4.2\(1\)

### cisco - pix_firewall_software

Affected Versions:

- 4.2\(2\)

### cisco - pix_firewall_software

Affected Versions:

- 4.3

### cisco - pix_firewall_software

Affected Versions:

- 4.4\(4\)

### cisco - pix_firewall_software

Affected Versions:

- 5.0

## References

- http://www.kb.cert.org/vuls/id/328867
  US Government Resource
- http://www.osvdb.org/4417
- http://www.securityfocus.com/bid/979
- http://www.kb.cert.org/vuls/id/328867
  US Government Resource
- http://www.osvdb.org/4417
- http://www.securityfocus.com/bid/979

Neural Processor Active