CVE-2004-0699: Buffer Overflow
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0699?
CVE-2004-0699 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2004-0699?
To fix CVE-2004-0699, apply the latest security patches provided by Check Point for affected VPN-1 and FireWall-1 products.
What products are affected by CVE-2004-0699?
CVE-2004-0699 affects Check Point FireWall-1 version 4.1-sp6 and various versions of Check Point VPN-1.
What type of attack does CVE-2004-0699 enable?
CVE-2004-0699 enables remote attackers to execute arbitrary code through a crafted IKE packet during an IKE negotiation.
What is the exploit method for CVE-2004-0699?
The exploit method for CVE-2004-0699 involves sending malformed ASN.1 data during Aggressive Mode IKE negotiations.