CVE-2001-1171

CVE-2001-1171 describes a critical vulnerability in Check Point Firewall-1 versions 3.0b through 4.0 SP1. The flaw allows local users to exploit the firewall's policy compilation process, which insecurely follows symlinks and creates world-writable temporary files. This could lead to privilege escalation or unauthorized modification of firewall policies, posing a significant risk to network security. With a CVSS score of 7.2 (HIGH), the vulnerability is easily exploitable locally with low attack complexity, resulting in complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is absent, the potential impact remains severe for unpatched systems.