CVE-2004-0469
Critical
Description
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
SeverityCritical
CVSS10.0
Exploit probability92. percentile5%
ProductCheckpoint Firewall-1
PublishedJul 7, 2004
First seenJul 7, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint firewall-1 | No range specified, 2.0, 2.0.1 | — |
| checkpoint next_generation | No range specified | — |
| checkpoint ng-ai | r54, r55 | — |
| checkpoint vpn-1 | vsx_2.0.1, vsx_ng_with_application_intelligence | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.