Vulnerability Details CVE-2004-0469
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.065
EPSS Ranking 90.5%
CVSS Severity
CVSS v2 Score 10.0
References
- http://www.checkpoint.com/techsupport/alerts/ike_vpn.html
- http://www.securityfocus.com/bid/10273
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16060
- http://www.checkpoint.com/techsupport/alerts/ike_vpn.html
- http://www.securityfocus.com/bid/10273
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16060
Products affected by CVE-2004-0469
-
cpe:2.3:a:checkpoint:firewall-1:*
-
cpe:2.3:a:checkpoint:firewall-1:2.0
-
cpe:2.3:a:checkpoint:firewall-1:2.0.1
-
cpe:2.3:a:checkpoint:next_generation:*
-
cpe:2.3:a:checkpoint:ng-ai:r54
-
cpe:2.3:a:checkpoint:ng-ai:r55
-
cpe:2.3:a:checkpoint:vpn-1:vsx_2.0.1
-
cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence