PT-2004-1779 · Check Point · Check Point Vpn-1

Published 2004-09-14 · Updated 2017-07-11 · CVE-2004-0699

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point VPN-1 products (affected versions not specified)

Description The issue is related to a heap-based buffer overflow in the ASN.1 decoding library. This occurs when Aggressive Mode IKE is implemented, allowing remote attackers to execute arbitrary code. The exploitation happens by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0699

Affected Products

Check Point Vpn-1

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2004-0699 · Security Note
• http://xforce.iss.net/xforce/alerts/id/178 · Vendor Advisory
• http://checkpoint.com/techsupport/alerts/asn1.html · Vendor Advisory
• http://securityfocus.com/bid/10820 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0699 · Note
• http://kb.cert.org/vuls/id/435358 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16824 · Note
• http://osvdb.org/displayvuln.php?osvdb_id=8290 · Note
• http://securitytracker.com/alerts/2004/Jul/1010799.html · Note
• http://ciac.org/ciac/bulletins/o-190.shtml · Note
• http://secunia.com/advisories/12177 · Note