CVE-2005-3673 The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS I...
HighCVSS 7.8
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint check point | All versions | No fix listed |
| checkpoint express | = ci_r57 | No fix listed |
| checkpoint firewall-1 | = 3.0 | No fix listed |
| checkpoint vpn-1 | = ngx_r60 | No fix listed |
| checkpoint vpn-1 firewall-1 next generation | = r54 | No fix listed |
| checkpoint vpn-1 firewall-1 next generation | = r55 | No fix listed |
| checkpoint vpn-1 firewall-1 next generation | = r55p | No fix listed |
| checkpoint vpn-1 firewall-1 next generation | = r55w | No fix listed |
References
- jvn.jp
- 17621 third-party-advisory
- secureknowledge.us.checkpoint.com
- 1015235 vdb-entry
- www.ee.oulu.fi
- VU#226364 third-party-advisory us-government-resource
- www.niscc.gov.uk vendor-advisory
- 15479 vdb-entry
- ADV-2005-2470 vdb-entry