CVE-2005-3673: High severity Checkpoint Check Point vulnerability

Published Nov 18, 2005

Updated

The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

Affected Software

8 affected components

Checkpoint Check Point

Checkpoint Vpn-1 Firewall-1 Next Generation=r55p

Checkpoint Firewall-1=3.0

Checkpoint Vpn-1 Firewall-1 Next Generation=r55

Checkpoint Vpn-1=ngx_r60

Checkpoint Express=ci_r57

Checkpoint Vpn-1 Firewall-1 Next Generation=r54

Checkpoint Vpn-1 Firewall-1 Next Generation=r55w

Event History

Nov 18, 2005

CVE Published

09:03 PM

Nov 19, 2005

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3673?

CVE-2005-3673 has been classified as a denial of service vulnerability affecting specific Check Point products.

How do I fix CVE-2005-3673?

To mitigate CVE-2005-3673, it is recommended to update to the latest version of affected Check Point software.

Which products are affected by CVE-2005-3673?

CVE-2005-3673 impacts several Check Point products, including VPN-1 and FireWall-1 across various versions.

What does CVE-2005-3673 exploit?

CVE-2005-3673 exploits vulnerabilities in the Internet Key Exchange version 1 implementation in Check Point devices.

Can CVE-2005-3673 be remotely exploited?

Yes, CVE-2005-3673 can be exploited remotely through crafted IKE packets.