Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability

BID:10273

Info

Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability

Bugtraq ID: 10273
Class: Boundary Condition Error
CVE: CVE-2004-0469
Remote: Yes
Local: No
Published: May 04 2004 12:00AM
Updated: Jul 12 2009 04:07AM
Credit: This issue was disclosed by Check Point Software.
Vulnerable: Check Point Software VPN-1 VSX NG with Application Intelligence
Check Point Software VPN-1 VSX 2.0.1
Check Point Software SecuRemote NG with Application Intelligence R56
Check Point Software SecureClient NG with Application Intelligence R56
Check Point Software NG-AI R55
Check Point Software NG-AI R54
Check Point Software Next Generation FP3 HF2
Check Point Software Next Generation FP3 HF1
Check Point Software Next Generation FP3
Check Point Software FireWall-1 VSX NG with Application Intelligence
Check Point Software FireWall-1 VSX 2.0.1
Check Point Software FireWall-1 GX 2.0
Not Vulnerable:

Discussion

Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability

It has been reported that Check Point VPN-1 products may be prone to a remote buffer overflow vulnerability that may allow a remote attacker to execute arbitrary code in order to gain unauthorized access.

The issue is reported to present itself in Check Point VPN-1 products during negotiations of a VPN tunnel. Specifically, a buffer overflow condition may be triggered by sending a malformed ISAKMP packet during the negotiations.

Check Point Software user who do not use Remote Access VPNs or gateway-to-gateway VPNs are not vulnerable to this issue.

Due to a lack of details, further information cannot be provided at the moment. This BID will be updated as more information becomes available.

Exploit / POC

Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability

Solution:
Check Point has released an alert (ISAKMP Alert) that contains pertinent details and fixes for affected customers. See referenced alert for further details.


Check Point Software NG-AI R55

Check Point Software NG-AI R54

Check Point Software VPN-1 VSX NG with Application Intelligence

Check Point Software Next Generation FP3

Check Point Software FireWall-1 VSX NG with Application Intelligence

Check Point Software FireWall-1 GX 2.0

Check Point Software FireWall-1 VSX 2.0.1

References

Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report