CVE-2004-0469

Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.checkpoint.com/techsupport/alerts/ike_vpn.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/10273	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16060
http://www.checkpoint.com/techsupport/alerts/ike_vpn.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/10273	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16060

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:checkpoint:firewall-1:::vsx-ng-ai:::::*
	cpe:2.3:a:checkpoint:firewall-1:2.0::gx:::::
	cpe:2.3:a:checkpoint:firewall-1:2.0.1::vsx:::::
	cpe:2.3:a:checkpoint:next_generation:::fp3:::::*
	cpe:2.3:a:checkpoint:ng-ai:r54:::::::*
	cpe:2.3:a:checkpoint:ng-ai:r55:::::::*
	cpe:2.3:a:checkpoint:vpn-1:vsx_2.0.1:::::::*
	cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:::::::*

History

20 Nov 2024, 23:48

Type	Values Removed	Values Added
References	~~() http://www.checkpoint.com/techsupport/alerts/ike_vpn.html - Patch, Vendor Advisory~~	() http://www.checkpoint.com/techsupport/alerts/ike_vpn.html - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/10273 - Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/10273 - Patch, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/16060 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/16060 -

Information

Published : 2004-07-07 04:00

Updated : 2024-11-20 23:48

NVD link : CVE-2004-0469

Mitre link : CVE-2004-0469

CVE.ORG link : CVE-2004-0469

JSON object : View

Products Affected

checkpoint

vpn-1
firewall-1
next_generation
ng-ai

CWE

NVD-CWE-Other

{"id": "CVE-2004-0469", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-07-07T04:00:00.000", "references": [{"url": "http://www.checkpoint.com/techsupport/alerts/ike_vpn.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10273", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16060", "source": "cve@mitre.org"}, {"url": "http://www.checkpoint.com/techsupport/alerts/ike_vpn.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10273", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16060", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en la funcionalidad ISAKMP de los productos Check Point VPN-1 y FireWall-1 NG, anteriores a VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 y NG FP3 HFA-325, o VPN-1 SecuRemote/SecureClient R56, puede permitir a atacantes remotos ejecutar c\u00f3digo arbitrario mediane una negociaci\u00f3n de tunel VPN."}], "lastModified": "2024-11-20T23:48:39.123", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"}, {"criteria": "cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C83ABA2-87CD-429B-9800-590F8256B064"}, {"criteria": "cpe:2.3:a:checkpoint:firewall-1:2.0.1:*:vsx:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E77F0C13-C65F-44DC-BD5D-A8F5CBF33F07"}, {"criteria": "cpe:2.3:a:checkpoint:next_generation:*:*:fp3:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "148E888C-9705-4015-ADF2-5863715D8041"}, {"criteria": "cpe:2.3:a:checkpoint:ng-ai:r54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9E1C23E-E495-4724-92AB-E1AB425FBB7D"}, {"criteria": "cpe:2.3:a:checkpoint:ng-ai:r55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60BC085B-508F-460F-8BE5-0B2842123DA8"}, {"criteria": "cpe:2.3:a:checkpoint:vpn-1:vsx_2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E5F3217-844F-41BB-8A7F-1D2F4445F3FE"}, {"criteria": "cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}