PT-2004-1589 · Check Point · Check Point Vpn-1+2

Publicado 2004-05-14 · Atualizado 2017-07-11 · CVE-2004-0469

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point VPN-1 versions prior to R55 HFA-03 Check Point VPN-1 versions prior to R54 HFA-410 Check Point FireWall-1 NG versions prior to NG FP3 HFA-325 Check Point VPN-1 SecuRemote/SecureClient versions prior to R56

Description The issue is related to a buffer overflow in the ISAKMP functionality, which may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.

Recommendations For Check Point VPN-1 versions prior to R55 HFA-03, update to R55 HFA-03 or later. For Check Point VPN-1 versions prior to R54 HFA-410, update to R54 HFA-410 or later. For Check Point FireWall-1 NG versions prior to NG FP3 HFA-325, update to NG FP3 HFA-325 or later. For Check Point VPN-1 SecuRemote/SecureClient versions prior to R56, update to R56 or later.

Correção

Identificadores relacionados

CVE-2004-0469

Produtos afetados

Check Point Firewall-1

Check Point Vpn-1

Check Point Vpn-1 Securemote/Secureclient

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0469 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16060 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0469 · Nota de Segurança
• http://checkpoint.com/techsupport/alerts/ike_vpn.html · Aviso do Fabricante
• http://securityfocus.com/bid/10273 · Aviso do Fabricante