CVE-1999-0770: Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an...

Security readout for executives and security teams

Check Point's Firewall-1, an older network security product, kept certain half-open connections alive for too long. An attacker could flood it with connection attempts to unreachable systems, tying up its resources and potentially causing a denial of service that disrupts traffic through the firewall. Very limited today. The issue affects legacy Check Point Firewall-1 versions from the late 1990s. Any environment still running an unsupported Firewall-1 release exposed to untrusted traffic could theoretically be affected, but modern Check Point products supersede this codebase. Low priority. This is a 1999-era denial-of-service issue in a legacy firewall product. Confirm no unsupported Firewall-1 units remain in the environment; if so, plan replacement as part of normal lifecycle management. No emergency action indicated by public sources. Mitigation focus: Retire or upgrade any remaining Check Point Firewall-1 deployments to a currently supported Check Point release.; Consult current Check Point vendor guidance for connection-tracking and timeout hardening.; Restrict inbound access to firewall management and data interfaces from untrusted networks..

Prepared

Jul 12, 2026, 06:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.