CVE-2004-0699

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-09-28

Last modified

2024-08-08

Affected products

• Firewall-1 (Checkpoint)
• Vpn-1 (Checkpoint)

References

• http://secunia.com/advisories/12177/
• http://securitytracker.com/alerts/2004/Jul/1010799.html
• http://www.checkpoint.com/techsupport/alerts/asn1.html
• http://www.ciac.org/ciac/bulletins/o-190.shtml
• http://www.kb.cert.org/vuls/id/435358
• http://www.osvdb.org/displayvuln.php?osvdb_id=8290
• http://www.securityfocus.com/bid/10820
• http://xforce.iss.net/xforce/alerts/id/178
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16824