CVE-2004-0699

Impact

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/12177/
• http://securitytracker.com/alerts/2004/Jul/1010799.html
• http://www.checkpoint.com/techsupport/alerts/asn1.html
• http://www.ciac.org/ciac/bulletins/o-190.shtml
• http://www.kb.cert.org/vuls/id/435358
• http://www.osvdb.org/displayvuln.php?osvdb_id=8290
• http://www.securityfocus.com/bid/10820
• http://xforce.iss.net/xforce/alerts/id/178
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16824
• http://secunia.com/advisories/12177/
• http://securitytracker.com/alerts/2004/Jul/1010799.html
• http://www.checkpoint.com/techsupport/alerts/asn1.html
• http://www.ciac.org/ciac/bulletins/o-190.shtml
• http://www.kb.cert.org/vuls/id/435358
• http://www.osvdb.org/displayvuln.php?osvdb_id=8290
• http://www.securityfocus.com/bid/10820
• http://xforce.iss.net/xforce/alerts/id/178
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16824