CVE-1999-1204: Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in use...

Security readout for executives and security teams

A Firewall-1 administrator could define objects using names that are actually restricted keywords. The firewall might then create a rule using the default ANY address, unintentionally allowing access to more systems than intended. The business risk is configuration drift causing over-permissive firewall policy, especially in legacy environments. Likely limited to legacy Check Point Firewall-1 deployments or retained rulebases using user-defined objects named with restricted keywords. The source bundle does not establish exposure for current Check Point products or specific versions. Prioritize review if legacy Firewall-1 still protects important network segments. The issue can weaken segmentation without obvious compromise indicators, but evidence is too incomplete to rate urgency above configuration assurance. Mitigation focus: Check Check Point guidance for reserved or restricted keywords.; Audit object names for Mail, auth, time, and other reserved terms.; Rename or correct objects that compile into unintended ANY addresses..

Prepared

Jul 11, 2026, 12:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.