PT-2004-1779 · Check Point · Check Point Vpn-1

Publicado 2004-09-14 · Atualizado 2017-07-11 · CVE-2004-0699

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point VPN-1 products (affected versions not specified)

Description The issue is related to a heap-based buffer overflow in the ASN.1 decoding library. This occurs when Aggressive Mode IKE is implemented, allowing remote attackers to execute arbitrary code. The exploitation happens by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0699

Produtos afetados

Check Point Vpn-1

Referências · 11

• http://securityfocus.com/bid/10820 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0699 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0699 · Nota de Segurança
• http://kb.cert.org/vuls/id/435358 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16824 · Nota
• http://osvdb.org/displayvuln.php?osvdb_id=8290 · Nota
• http://xforce.iss.net/xforce/alerts/id/178 · Aviso do Fabricante
• http://securitytracker.com/alerts/2004/Jul/1010799.html · Nota
• http://ciac.org/ciac/bulletins/o-190.shtml · Nota
• http://checkpoint.com/techsupport/alerts/asn1.html · Aviso do Fabricante
• http://secunia.com/advisories/12177 · Nota