CVE-2004-0469 Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56,....
HighCVSS 10.0
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | All versions | No fix listed |
| checkpoint firewall-1 | = 2.0 | No fix listed |
| checkpoint firewall-1 | = 2.0.1 | No fix listed |
| checkpoint next generation | All versions | No fix listed |
| checkpoint ng-ai | = r54 | No fix listed |
| checkpoint ng-ai | = r55 | No fix listed |
| checkpoint vpn-1 | = vsx_2.0.1 | No fix listed |
| checkpoint vpn-1 | = vsx_ng_with_application_intelligence | No fix listed |
References
- 20040504 ISAKMP Vulnerability patch vendor-advisory
- 10273 patch vdb-entry vendor-advisory
- vpn1-isakmp-bo(16060) vdb-entry