Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firewall-1 | Checkpoint | * | * |
| Firewall-1 | Checkpoint | 2.0 (including) | 2.0 (including) |
| Firewall-1 | Checkpoint | 2.0.1 (including) | 2.0.1 (including) |
| Next_generation | Checkpoint | * | * |
| Ng-ai | Checkpoint | r54 (including) | r54 (including) |
| Ng-ai | Checkpoint | r55 (including) | r55 (including) |
| Vpn-1 | Checkpoint | vsx_2.0.1 (including) | vsx_2.0.1 (including) |
| Vpn-1 | Checkpoint | vsx_ng_with_application_intelligence (including) | vsx_ng_with_application_intelligence (including) |
References
- http://www.checkpoint.com/techsupport/alerts/ike_vpn.html
- http://www.securityfocus.com/bid/10273
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16060
- http://www.checkpoint.com/techsupport/alerts/ike_vpn.html
- http://www.securityfocus.com/bid/10273
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16060