Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability
BID:10273
Info
Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 10273 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-0469 |
| Remote: | Yes |
| Local: | No |
| Published: | May 04 2004 12:00AM |
| Updated: | Jul 12 2009 04:07AM |
| Credit: | This issue was disclosed by Check Point Software. |
| Vulnerable: |
Check Point Software VPN-1 VSX NG with Application Intelligence Check Point Software VPN-1 VSX 2.0.1 Check Point Software SecuRemote NG with Application Intelligence R56 Check Point Software SecureClient NG with Application Intelligence R56 Check Point Software NG-AI R55 Check Point Software NG-AI R54 Check Point Software Next Generation FP3 HF2 Check Point Software Next Generation FP3 HF1 Check Point Software Next Generation FP3 Check Point Software FireWall-1 VSX NG with Application Intelligence Check Point Software FireWall-1 VSX 2.0.1 Check Point Software FireWall-1 GX 2.0 |
| Not Vulnerable: | |
Discussion
Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability
It has been reported that Check Point VPN-1 products may be prone to a remote buffer overflow vulnerability that may allow a remote attacker to execute arbitrary code in order to gain unauthorized access.
The issue is reported to present itself in Check Point VPN-1 products during negotiations of a VPN tunnel. Specifically, a buffer overflow condition may be triggered by sending a malformed ISAKMP packet during the negotiations.
Check Point Software user who do not use Remote Access VPNs or gateway-to-gateway VPNs are not vulnerable to this issue.
Due to a lack of details, further information cannot be provided at the moment. This BID will be updated as more information becomes available.
It has been reported that Check Point VPN-1 products may be prone to a remote buffer overflow vulnerability that may allow a remote attacker to execute arbitrary code in order to gain unauthorized access.
The issue is reported to present itself in Check Point VPN-1 products during negotiations of a VPN tunnel. Specifically, a buffer overflow condition may be triggered by sending a malformed ISAKMP packet during the negotiations.
Check Point Software user who do not use Remote Access VPNs or gateway-to-gateway VPNs are not vulnerable to this issue.
Due to a lack of details, further information cannot be provided at the moment. This BID will be updated as more information becomes available.
Exploit / POC
Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability
Solution:
Check Point has released an alert (ISAKMP Alert) that contains pertinent details and fixes for affected customers. See referenced alert for further details.
Check Point Software NG-AI R55
Check Point Software NG-AI R54
Check Point Software VPN-1 VSX NG with Application Intelligence
Check Point Software Next Generation FP3
Check Point Software FireWall-1 VSX NG with Application Intelligence
Check Point Software FireWall-1 GX 2.0
Check Point Software FireWall-1 VSX 2.0.1
Solution:
Check Point has released an alert (ISAKMP Alert) that contains pertinent details and fixes for affected customers. See referenced alert for further details.
Check Point Software NG-AI R55
-
Check Point Software HFA-03 for IPSO
For IPSO
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=IPSO%203.7&patchlevel_selected=R55%20-%20H otfixes -
Check Point Software HFA-03 for Linux
For Linux
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Linux&patchlevel_selected=R55%20-%20Hotfix es -
Check Point Software HFA-03 for SecurePlatform
For SecurePlatform
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=SecurePlatform&patchlevel_selected=R55%20- %20Hotfixes -
Check Point Software HFA-03 for Solaris
For Solaris
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Solaris%202.8&patchlevel_selected=R55%20-% 20Hotfixes -
Check Point Software HFA-03 for Windows
For Windows
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Windows%20NT&patchlevel_selected=R55%20-%2 0Hotfixes
Check Point Software NG-AI R54
-
Check Point Software HFA-410 for IPSO
For IPSO
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=IPSO%203.7&patchlevel_selected=R54%20-%20H otfixes -
Check Point Software HFA-410 for Linux
For Linux
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Linux&patchlevel_selected=R54%20-%20Hotfix es -
Check Point Software HFA-410 for SecurePlatform
For SecurePlatform
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=SecurePlatform&patchlevel_selected=R54%20- %20Hotfixes -
Check Point Software HFA-410 for Solaris
For Solaris
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Solaris%202.8&patchlevel_selected=R54%20-% 20Hotfixes -
Check Point Software HFA-410 for Windows
For Windows
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Windows%20NT&patchlevel_selected=R54%20-%2 0Hotfixes
Check Point Software VPN-1 VSX NG with Application Intelligence
-
Check Point Software VPN-1/FireWall-1 VSX
VPN-1/FireWall-1 VSX NG with Application Intelligence
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1%20VSX&version_selected=VSX%20NG%20with%2 0Application%20Intelligence&os_selected=VSX%20NG%20with%20Application% 20Intelligence%20SingleCD&patchlevel_selected
Check Point Software Next Generation FP3
-
Check Point Software HFA-325 for IPSO
For IPSO
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=IPSO%203 .6&patchlevel_selected=FP3%20-%20Hotfixes -
Check Point Software HFA-325 for Linux
For Linux
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=Linux&pa tchlevel_selected=FP3%20-%20Hotfixes -
Check Point Software HFA-325 for SecurePlatform
For SecurePlatform
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=SecurePl atform%20FP3%20Edition%202&patchlevel_selected=FP3%20-%20Hotfixes -
Check Point Software HFA-325 for Solaris
For Solaris
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=Solaris% 202.8&patchlevel_selected=FP3%20-%20Hotfixes -
Check Point Software HFA-325 for Windows
For Windows
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=Windows% 20NT&patchlevel_selected=FP3%20-%20Hotfixes
Check Point Software FireWall-1 VSX NG with Application Intelligence
-
Check Point Software VPN-1/FireWall-1 VSX
VPN-1/FireWall-1 VSX NG with Application Intelligence
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1%20VSX&version_selected=VSX%20NG%20with%2 0Application%20Intelligence&os_selected=VSX%20NG%20with%20Application% 20Intelligence%20SingleCD&patchlevel_selected -
Check Point Software VSX NG with Application Intelligence HotFix
For SecurePlatform
http://www.checkpoint.com/support/downloads/bin/vpn_des/vsx/ngai/linux /vpn_hf_vsx_ngai_april_2004_linux.zip
Check Point Software FireWall-1 GX 2.0
-
Check Point Software GX 2.0 Hotfix for IPSO
For IPSO
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/ipso/c p_ike_hotfix_apr_2004_gx20_ipso.gz -
Check Point Software GX 2.0 Hotfix for Linux
For Linux
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/linux/ cp_ike_hotfix_apr_2004_gx20_linux.gz -
Check Point Software GX 2.0 Hotfix for SecurePlatform
For SecurePlatform
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/linux/ cp_ike_hotfix_apr_2004_gx20_linux.gz -
Check Point Software GX 2.0 Hotfix for Solaris
For Solaris
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/solari s/cp_ike_hotfix_apr_2004_gx20_solaris2.gz
Check Point Software FireWall-1 VSX 2.0.1
-
Check Point Software VSX 2.0.1 Hotfix
For SecurePlatform
http://www.checkpoint.com/support/downloads/bin/vpn_des/vsx/2.0.1/linu x/vpn_hf_vsx_201_april_2004_linux.zip
References
Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability
References:
References:
- ISAKMP Vulnerability (Check Point Software)