Unscored CVE-2004-0040 EUVD-2004-0040GHSA-g6gr-9gwj-m25x

Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4…

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.

References

20040205 Two checkpoint fw-1/vpn-1 vulns mailing-list
VU#873334 third-party-advisory
9582 vdb-entry
4432 vdb-entry
vpn1-ike-bo(14150) vdb-entry
O-073 third-party-advisory government-resource
3821 vdb-entry
20040204 Checkpoint VPN-1/SecureClient ISAKMP Buffer Overflow third-party-advisory