Check Point Firewall-1 and VPN-1 ISAKMP IKE Unspecified Denial of Service Vulnerability

Bugtraq ID:	15479
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-3673
Remote:	Yes
Local:	No
Published:	Nov 17 2005 12:00AM
Updated:	Nov 17 2005 12:00AM
Credit:	Discovery is credited to Cisco in cooperation with CERT-FI and NISCC.
Vulnerable:	Check Point Software VPN-1/Firewall-1 NG with AI R55W Check Point Software VPN-1/Firewall-1 NG with AI R55P Check Point Software VPN-1/Firewall-1 NG with AI R55 Check Point Software VPN-1/Firewall-1 NG with AI R54 Check Point Software VPN-1 Pro NGX R60 Check Point Software FireWall-1 GX 3.0 Check Point Software Express CI R57
Not Vulnerable:

Check Point Firewall-1 and VPN-1 ISAKMP IKE Unspecified Denial of Service Vulnerability

Check Point Firewall-1 and VPN-1 are prone to denial of service attacks due to unspecified vulnerabilities in the IPSec implementation. The vulnerabilities may be triggered by malformed IKE traffic.

Check Point Firewall-1 and VPN-1 ISAKMP IKE Unspecified Denial of Service Vulnerability

These issues can be reproduced with the PROTOS IPSec Test Suite.

Check Point Firewall-1 and VPN-1 ISAKMP IKE Unspecified Denial of Service Vulnerability

Solution:
Check Point has addressed these issues in the latest Hotfix Accumulators.

Check Point Firewall-1 and VPN-1 ISAKMP IKE Unspecified Denial of Service Vulnerability

References:

• Check Point Technical Support (Check Point Software)
  
• Current Hotfix Accumulators (HFAs) (Check Point Software)