Description
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.
References
- http://www.checkpoint.com/techsupport/alerts/asn1.html
- 1010799 vdb-entry
- VU#435358 third-party-advisory
- 8290 vdb-entry
- 10820 vdb-entry
- 12177 third-party-advisory
- 20040728 Check Point VPN-1 ASN.1 Decoding Remote Compromise third-party-advisory
- O-190 third-party-advisory government-resource
- vpn1-asn1-decoding-bo(16824) vdb-entry