CVE Vulnerabilities

CVE-2004-0699

Published: Sep 28, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Affected Software

Name Vendor Start Version End Version
Firewall-1 Checkpoint 4.1-sp6 (including) 4.1-sp6 (including)
Vpn-1 Checkpoint * *

References