Check Point warns of firewall flaws

Thursday, 5 February 2004, 10:36 AM EST

The flaws--found by security firm Internet Security Systems (ISS)--may give intruders access to corporate networks through the devices designed to keep attackers out.

"Really controlling the firewall is controlling the gatekeeper for the network," said Dan Ingevaldson, director of vulnerability researcher and development for ISS. "If (an attacker) can control all the data going in and out--really, the game is over at that point."

Check Point released a patch for its latest line of firewalls, the NG, or Next Generation series. The patch corrects a flaw in the way the software inspects Web data passing through the device. The second flaw affects the company's earlier virtual private network product, VPN-1, and won't be fixed, as Check Point no longer supports the software.

By Robert Lemos at CNET.

[ Read more ]

Related items




Spotlight

Critical bug found in Cisco ASA products, attackers are scanning for affected devices

Several Cisco ASA products - appliances, firewalls, switches, routers, and security modules - have been found sporting a flaw that can ultimately lead to remote code execution by attackers.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, Feb 12th
    COPYRIGHT 1998-2016 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //