Lucene search

MitreCVE-2004-0699

HistorySep 28, 2004 - 4:00 a.m.

CVE-2004-0699

2004-09-2804:00:00

mitre

web.nvd.nist.gov

cve-2004-0699

heap-based buffer overflow

asn.1 decoding library

check point vpn-1

aggressive mode ike

remote code execution

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

High

EPSS

0.871

Percentile

98.6%

JSON

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Affected configurations

Nvd

Node

checkpointfirewall-1Match4.1sp6

checkpointvpn-1

VendorProductVersionCPE
checkpointfirewall-14.1cpe:2.3:a:checkpoint:firewall-1:4.1:sp6:*:*:*:*:*:*
checkpointvpn-1*cpe:2.3:a:checkpoint:vpn-1:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
checkpoint	firewall-1	4.1	cpe:2.3:a:checkpoint:firewall-1:4.1:sp6::::::
checkpoint	vpn-1	*	cpe:2.3:a:checkpoint:vpn-1::::::::

References

secunia.com/advisories/12177/

securitytracker.com/alerts/2004/Jul/1010799.html

www.checkpoint.com/techsupport/alerts/asn1.html

www.ciac.org/ciac/bulletins/o-190.shtml

www.kb.cert.org/vuls/id/435358

www.osvdb.org/displayvuln.php?osvdb_id=8290

www.securityfocus.com/bid/10820

xforce.iss.net/xforce/alerts/id/178

exchange.xforce.ibmcloud.com/vulnerabilities/16824

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

High

EPSS

0.871

Percentile

98.6%

JSON

Related for CVE-2004-0699