CVE-2001-1499 — Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks

Back Back to CVE browser

MEDIUM

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks

Published Jun 21, 2005

5.0

MEDIUM

CVSS 2.0

EPSS 1.52%

Description

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.52% 0.01520

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01520

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.52% (0.01520)	73.65th	v5 (v2026.06.15)
Jun 15, 2026	1.52% (0.01520)	71.20th	v5 (v2026.06.15)
Mar 17, 2025	0.70% (0.00698)	70.26th	v4 (v2025.03.14)
Dec 12, 2024	0.46% (0.00459)	76.14th	v3 (v2023.03.01)
May 28, 2024	0.46% (0.00459)	75.31th	v3 (v2023.03.01)
Feb 8, 2024	0.58% (0.00585)	77.49th	v3 (v2023.03.01)
Mar 7, 2023	0.58% (0.00585)	74.84th	v3 (v2023.03.01)
Mar 6, 2023	1.21% (0.01213)	66.61th	v2 (v2022.01.01)
Feb 17, 2023	1.21% (0.01213)	66.22th	v2 (v2022.01.01)
Apr 1, 2022	1.21% (0.01213)	64.21th	v2 (v2022.01.01)
Feb 4, 2022	1.21% (0.01213)	40.54th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (5)

http://www.osvdb.org/20210
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/222366
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/222479
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/3470
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/7343
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.osvdb.org/20210		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/222366		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/222479		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/3470		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/7343		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 21, 2005

Updated Aug 8, 2024

Reserved Jun 21, 2005

Link CVE-2001-1499

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2001-1499

Red Hat

Severity n/a

Public date n/a

Links CVE-2001-1499