CVE-2004-0699

Summary

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.checkpoint.com/techsupport/alerts/asn1.html
• http://securitytracker.com/alerts/2004/Jul/1010799.html
• http://www.kb.cert.org/vuls/id/435358
• http://www.osvdb.org/displayvuln.php?osvdb_id=8290
• http://www.securityfocus.com/bid/10820
• http://secunia.com/advisories/12177/
• http://xforce.iss.net/xforce/alerts/id/178
• http://www.ciac.org/ciac/bulletins/o-190.shtml
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16824

References

• http://www.checkpoint.com/techsupport/alerts/asn1.html
• http://securitytracker.com/alerts/2004/Jul/1010799.html
• http://www.kb.cert.org/vuls/id/435358
• http://www.osvdb.org/displayvuln.php?osvdb_id=8290
• http://www.securityfocus.com/bid/10820
• http://secunia.com/advisories/12177/
• http://xforce.iss.net/xforce/alerts/id/178
• http://www.ciac.org/ciac/bulletins/o-190.shtml
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16824

• ←Previous
• Next→