CVE-2001-1171: Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp fi...

Security readout for executives and security teams

This legacy Check Point Firewall-1 issue lets a local user interfere with policy compilation by abusing unsafe temporary file handling. The business risk is loss of firewall policy integrity or privilege escalation on the firewall management host, but the source bundle does not show remote exploitation or active exploitation. Exposure appears limited to organizations still operating Check Point Firewall-1 3.0b through 4.0 SP1, especially where untrusted local users can access the policy-compilation host. The sources do not identify other affected products or modern supported versions. Prioritize if legacy Firewall-1 is still in production or manages critical network policy. Otherwise, treat as a legacy exposure discovery item and confirm retirement status. Mitigation focus: Inventory for Firewall-1 3.0b through 4.0 SP1 systems.; Restrict shell and local account access on policy-compilation hosts.; Check Check Point archival guidance for fixes or upgrade paths..

Prepared

Jul 1, 2026, 07:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.