CVE:CVE-2001-1431
CNNVD:CNNVD-200110-031
运行IPSO 3.3版本和VPN-1/FireWall-1 4.1 Service Pack 3，IPSO 3.4版本和VPN-1/FireWall-1 4.1 Service Pack 4，以及IPSO 3.4版本，或IPSO 3.4.1版本和VPN-1/FireWall-1 4.1 Service Pack 5的Nokia Firewall Appliances，在配置有SYN Defender的Active Gateway模式时，不正确重写TCP三次握手使用的NAT IP地址的三个数据包，远程攻击者可以利用该漏洞获取敏感信息。
solution:Upgrade checkpoint firewall-1 to a higher version than 4.1:sp3,4.1:sp4,4.1:sp5,and avoid the version 4.1:sp3,4.1:sp4,4.1:sp5; Upgrade checkpoint vpn-1 to a higher version than 4.1:sp3,4.1:sp4,and avoid the version 4.1:sp3,4.1:sp4; Upgrade nokia firewall_appliance to a higher version than ipso_3.3,ipso_3.4,ipso_3.41,and avoid the version ipso_3.3,ipso_3.4,ipso_3.41