## Description

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### checkpoint - firewall-1

Affected Versions:

- 3.0

### checkpoint - firewall-1

Affected Versions:

- 4.0

## References

- http://www.osvdb.org/1027
- http://www.securityfocus.com/bid/549
  Exploit Patch Vendor Advisory
- http://www.osvdb.org/1027
- http://www.securityfocus.com/bid/549
  Exploit Patch Vendor Advisory

Neural Processor Active