CVE-2004-0040 Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an....
HighCVSS 10.0
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | = 4.1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp2 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp3 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp4 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp5 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp5a | No fix listed |
| checkpoint firewall-1 | = next_generation_fp0 | No fix listed |
| checkpoint firewall-1 | = next_generation_fp1 | No fix listed |
| checkpoint vpn-1 | = 4.1-sp5a | No fix listed |
| checkpoint vpn-1 | = next_generation_fp0 | No fix listed |
| checkpoint vpn-1 | = next_generation_fp1 | No fix listed |
References
- 20040205 Two checkpoint fw-1/vpn-1 vulns mailing-list
- O-073 government-resource third-party-advisory
- VU#873334 patch third-party-advisory us-government-resource
- 3821 vdb-entry
- 4432 vdb-entry
- 9582 patch vdb-entry vendor-advisory
- 20040204 Checkpoint VPN-1/SecureClient ISAKMP Buffer Overflow third-party-advisory
- vpn1-ike-bo(14150) vdb-entry