CVE-2004-0699 Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE nego...
HighCVSS 7.5
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | = 4.1-sp6 | No fix listed |
| checkpoint vpn-1 | All versions | No fix listed |
References
- 12177 third-party-advisory
- 1010799 vdb-entry
- www.checkpoint.com patch vendor-advisory
- O-190 government-resource third-party-advisory
- VU#435358 third-party-advisory us-government-resource
- 8290 vdb-entry
- 10820 vdb-entry
- 20040728 Check Point VPN-1 ASN.1 Decoding Remote Compromise patch third-party-advisory vendor-advisory
- vpn1-asn1-decoding-bo(16824) vdb-entry