How severe is CVE-2001-1499?

CVE-2001-1499 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2001-1499 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-1499?

CVE-2001-1499 affects Checkpoint Vpn-1. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2001-1499?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2001-1499 published?

CVE-2001-1499 was published on 2001-12-31 and last updated on 2026-06-16.

CVE-2001-1499

CVE-2001-1499 is a medium-severity vulnerability in Checkpoint Vpn-1 with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 2% (72nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Checkpoint Vpn-1
Published: 2001-12-31
Last modified: 2026-06-16

Description

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

Frequently asked questions

What is CVE-2001-1499?: Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.
How severe is CVE-2001-1499?: CVE-2001-1499 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2001-1499 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-1499?: CVE-2001-1499 affects Checkpoint Vpn-1. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2001-1499?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2001-1499 published?: CVE-2001-1499 was published on 2001-12-31 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*

More vulnerabilities in Checkpoint Vpn-1

CVE-2004-0469 — Critical (CVSS 10.0): Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1…
CVE-2004-0040 — Critical (CVSS 10.0): Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1…
CVE-2011-1827 — Critical (CVSS 9.3): Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security…
CVE-2005-3673 — High (CVSS 7.8): The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a…
CVE-2004-0079 — High (CVSS 7.5): The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause…
CVE-2004-0699 — High (CVSS 7.5): Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is…

All CVEs affecting Checkpoint Vpn-1 →