Details of VAR-200407-0061

ID

VAR-200407-0061

CVE

CVE-2004-0469

TITLE

Check Point VPN-1 ISAKMP Remote Buffer Overflow Vulnerability

Trust: 0.9

sources: BID: 10273 // CNNVD: CNNVD-200407-001

DESCRIPTION

Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation. Check Point VPN-1/Firewall-1 Is VPN When negotiating tunnels, ISAKMP There is a vulnerability that does not properly perform boundary checking in the processing part of the protocol.Arbitrary code may be executed. Specifically, a buffer overflow condition may be triggered by sending a malformed ISAKMP packet during the negotiations. Check Point Software user who do not use Remote Access VPNs or gateway-to-gateway VPNs are not vulnerable to this issue. Due to a lack of details, further information cannot be provided at the moment. This BID will be updated as more information becomes available. Check Point Firewall-1 is a high-performance firewall, Checkpoint VPN-1 server and Checkpoint VPN client provide VPN access for remote client computers. The IKE component of these products allows non-directional or bi-directional authentication of two remote peers

Trust: 1.98

sources: NVD: CVE-2004-0469 // JVNDB: JVNDB-2004-000175 // BID: 10273 // VULHUB: VHN-8899

AFFECTED PRODUCTS

vendor:	checkpoint	model:	ng-ai	scope:	eq	version:	r54	Trust: 1.6
vendor:	checkpoint	model:	firewall-1	scope:	eq	version:	2.0.1	Trust: 1.6
vendor:	checkpoint	model:	vpn-1	scope:	eq	version:	vsx_2.0.1	Trust: 1.6
vendor:	checkpoint	model:	firewall-1	scope:	eq	version:	2.0	Trust: 1.6
vendor:	checkpoint	model:	ng-ai	scope:	eq	version:	r55	Trust: 1.6
vendor:	checkpoint	model:	vpn-1	scope:	eq	version:	vsx_ng_with_application_intelligence	Trust: 1.6
vendor:	checkpoint	model:	next generation	scope:	eq	version:	*	Trust: 1.0
vendor:	checkpoint	model:	firewall-1	scope:	eq	version:	*	Trust: 1.0
vendor:	check point	model:	vpn-1/firewall-1	scope:	eq	version:	ng fp2	Trust: 0.8
vendor:	check point	model:	vpn-1/firewall-1	scope:	eq	version:	ng fp3	Trust: 0.8
vendor:	check point	model:	vpn-1/firewall-1	scope:	eq	version:	ng with application intelligence (r54)	Trust: 0.8
vendor:	check point	model:	vpn-1/firewall-1	scope:	eq	version:	ng with application intelligence (r55)	Trust: 0.8
vendor:	checkpoint	model:	next generation	scope:	eq	version:	fp3	Trust: 0.6
vendor:	checkpoint	model:	firewall-1	scope:	eq	version:	vsx-ng-ai	Trust: 0.6
vendor:	check	model:	point software vpn-1 vsx ng with application intelligence	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software vpn-1 vsx	scope:	eq	version:	2.0.1	Trust: 0.3
vendor:	check	model:	point software securemote ng with application intelligence r56	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software secureclient ng with application intelligence r56	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software ng-ai r55	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software ng-ai r54	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software next generation fp3 hf2	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software next generation fp3 hf1	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software next generation fp3	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software firewall-1 vsx ng with application intelligence	scope:	-	version:	-	Trust: 0.3
vendor:	check	model:	point software firewall-1 vsx	scope:	eq	version:	2.0.1	Trust: 0.3
vendor:	check	model:	point software firewall-1 gx	scope:	eq	version:	2.0	Trust: 0.3

sources: BID: 10273 // JVNDB: JVNDB-2004-000175 // CNNVD: CNNVD-200407-001 // NVD: CVE-2004-0469

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2004-0469
value:	HIGH
Trust: 1.0
NVD:	CVE-2004-0469
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-200407-001
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-8899
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2004-0469
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-8899
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-8899 // JVNDB: JVNDB-2004-000175 // CNNVD: CNNVD-200407-001 // NVD: CVE-2004-0469

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-0469

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200407-001

TYPE

Boundary Condition Error

Trust: 0.9

sources: BID: 10273 // CNNVD: CNNVD-200407-001

CONFIGURATIONS

sources: JVNDB: JVNDB-2004-000175

PATCH

title:

ike_vpn

url:

http://www.checkpoint.com/techsupport/alerts/ike_vpn.html

Trust: 0.8

sources: JVNDB: JVNDB-2004-000175

EXTERNAL IDS

db:	NVD	id:	CVE-2004-0469	Trust: 2.8
db:	BID	id:	10273	Trust: 2.8
db:	SECUNIA	id:	11546	Trust: 0.8
db:	JVNDB	id:	JVNDB-2004-000175	Trust: 0.8
db:	CNNVD	id:	CNNVD-200407-001	Trust: 0.7
db:	XF	id:	16060	Trust: 0.6
db:	XF	id:	1	Trust: 0.6
db:	CHECKPOINT	id:	20040504 ISAKMP VULNERABILITY	Trust: 0.6
db:	VULHUB	id:	VHN-8899	Trust: 0.1

sources: VULHUB: VHN-8899 // BID: 10273 // JVNDB: JVNDB-2004-000175 // CNNVD: CNNVD-200407-001 // NVD: CVE-2004-0469

REFERENCES

url:	http://www.securityfocus.com/bid/10273	Trust: 2.5
url:	http://www.checkpoint.com/techsupport/alerts/ike_vpn.html	Trust: 2.0
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/16060	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2004-0469	Trust: 0.8
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2004-0469	Trust: 0.8
url:	http://secunia.com/advisories/11546/	Trust: 0.8
url:	http://xforce.iss.net/xforce/xfdb/16060	Trust: 0.6

sources: VULHUB: VHN-8899 // BID: 10273 // JVNDB: JVNDB-2004-000175 // CNNVD: CNNVD-200407-001 // NVD: CVE-2004-0469

CREDITS

Check Point Software

Trust: 0.6

sources: CNNVD: CNNVD-200407-001

SOURCES

db:	VULHUB	id:	VHN-8899
db:	BID	id:	10273
db:	JVNDB	id:	JVNDB-2004-000175
db:	CNNVD	id:	CNNVD-200407-001
db:	NVD	id:	CVE-2004-0469

LAST UPDATE DATE

2024-08-14T12:33:36.574000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-8899	date:	2017-07-11T00:00:00
db:	BID	id:	10273	date:	2009-07-12T04:07:00
db:	JVNDB	id:	JVNDB-2004-000175	date:	2007-04-01T00:00:00
db:	CNNVD	id:	CNNVD-200407-001	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2004-0469	date:	2017-07-11T01:30:11.090

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-8899	date:	2004-07-07T00:00:00
db:	BID	id:	10273	date:	2004-05-04T00:00:00
db:	JVNDB	id:	JVNDB-2004-000175	date:	2007-04-01T00:00:00
db:	CNNVD	id:	CNNVD-200407-001	date:	2004-05-04T00:00:00
db:	NVD	id:	CVE-2004-0469	date:	2004-07-07T04:00:00