CVE-2000-0813: Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other s...

Security readout for executives and security teams

An old flaw in Check Point VPN-1/FireWall-1 4.1 and earlier let outside attackers abuse the firewall's FTP handling to bounce connections through it toward other servers. In plain terms, the firewall could be tricked into helping someone reach systems it was supposed to protect. The issue is decades old and only matters if legacy Check Point 4.x gear is still in service. Exposure today should be near zero. Check Point FireWall-1 4.1 reached end-of-life many years ago, and modern versions rewrote FTP inspection. Risk remains only for organizations still running the affected 4.x platform, typically in isolated legacy or industrial environments where firewall FTP inspection is exposed to untrusted networks. Low priority for modern estates. Treat as a hygiene check: ensure no Check Point FireWall-1 4.x devices remain, since running a 25-year-old, unsupported firewall is a broader risk than this single CVE. If discovered, replacement should be scheduled promptly. Mitigation focus: Confirm no Check Point VPN-1/FireWall-1 4.1 or earlier instances remain in production.; If legacy 4.x is unavoidable, consult Check Point's advisory for the referenced FTP hotfix or upgrade path.; Upgrade to a currently supported Check Point release with modern FTP application control..

Prepared

Jul 12, 2026, 00:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.