Check Point Firewall-1 RDP Header Firewall Bypassing Vulnerability

Check Point Firewall-1 RDP Header Firewall Bypassing Vulnerability

Check Point Firewall-1 is an enterprise level, full feature firewall package distributed by Check Point. It is designed to work on various operating systems, both as a single firewall or as a firewall cluster system.

A problem has been discovered with the firewall that allows traversal. It is possible for a remote user to pass packets across the firewall via port 259 by using false RDP headers on UDP packets.

This makes it possible for remote users to gain access to restricted information systems.