Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0082
http://archives.neohapsis.com/archives/bugtraq/2000-12/0271.html