CVE-2004-2679 Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes Fi...
HighCVSS 7.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | = 4.0 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp1 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp2 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp3 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp4 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp5 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp6 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp7 | No fix listed |
| checkpoint firewall-1 | = 4.0-sp8 | No fix listed |
| checkpoint firewall-1 | = 4.1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp1 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp2 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp3 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp4 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp5 | No fix listed |
| checkpoint firewall-1 | = 4.1-sp5a | No fix listed |
| checkpoint firewall-1 | = 4.1-sp6 | No fix listed |
| checkpoint firewall-1 | = r55 | No fix listed |
References
- 20040616 Checkpoint Firewall-1 IKE Vendor ID information leakage mailing-list
- www.nta-monitor.com
- 10558 vdb-entry
- fw1-vendorid-info-disclosure(16434) vdb-entry