漏洞信息详情

Check Point VPN-1 ASN.1缓冲区溢出漏洞

• CNNVD编号：CNNVD-200409-068
• 危害等级： 高危
  
• CVE编号： CVE-2004-0699
• 漏洞类型： 缓冲区溢出
• 发布时间： 2004-09-28
• 威胁类型： 远程
• 更新时间： 2005-10-20
• 厂        商： checkpoint
• 漏洞来源： Discovery of this ...

漏洞简介

Check Point VPN-1产品的ASN.1译码库文件存在基于堆的缓冲区溢出漏洞。积极模式IKE生效时，远程攻击者可以通过初始化IKE协议并发送IKE畸形ASN.1数据包执行任意代码。

漏洞公告

The vendor has released fixes to address this vulnerability in affected products, please see the referenced CheckPoint advisory (ASN.1 Alert) for further details regarding obtaining and applying appropriate updates.

参考网址

来源:US-CERT Vulnerability Note: VU#435358 名称: VU#435358 链接:http://www.kb.cert.org/vuls/id/435358 来源: XF 名称: vpn1-asn1-decoding-bo(16824) 链接:http://xforce.iss.net/xforce/xfdb/16824 来源: ISS 名称: 20040728 Check Point VPN-1 ASN.1 Decoding Remote Compromise 链接:http://xforce.iss.net/xforce/alerts/id/178 来源: www.checkpoint.com 链接:http://www.checkpoint.com/techsupport/alerts/asn1.HTML 来源: CIAC 名称: O-190 链接:http://www.ciac.org/ciac/bulletins/o-190.sHTML 来源: SECUNIA 名称: 12177 链接:http://secunia.com/advisories/12177/ 来源: BID 名称: 10820 链接:http://www.securityfocus.com/bid/10820 来源: OSVDB 名称: 8290 链接:http://www.osvdb.org/displayvuln.php?osvdb_id=8290 来源: SECTRACK 名称: 1010799 链接:http://securitytracker.com/alerts/2004/Jul/1010799.HTML

受影响实体

• Checkpoint Firewall-1:4.1:Sp6  
• Checkpoint Vpn-1  

补丁

暂无