OSVDB ID: 8290

Title: Check Point VPN-1 ASN.1 Decoding Heap Overflow

Info

Disclosure
Jul 28, 2004

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A remote overflow exists in Checkpoint VPN-1/Firewall-1 software. Checkpoint VPN-1/FireWall-1 software fails to properly santize ASN.1 decoding during the initial VPN tunnel encryption setup over ISAKMP resulting in a heap overflow. With a specially crafted request, an attacker can compromise the server resulting in a loss of confidentiality and integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Disclosure: OSVDB Verified
OSVDB: Security Software

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Checkpoint has released patches for each corresponding version to address this vulnerability.

Products

Check Point Software Technologies, Inc.

VPN-1/Firewall-1 NG with Application Intelligence

 R54
R55

Application Intelligence VPN-1/FireWall-1 NG with Application Intelligence

 R55W

VPN-1/FireWall-1 Next Generation

 FP3

VSX FireWall-1

 GX

SecuRemote

 R55

SecureClient

 R55
4.1 SP5 with SSL Hotfix

Secure Remote

 4.1 SP5 with SSL Hotfix

References

Credit
  • Mark Dowd - Avertavertlabs.com - McAfee Avert(tm) Labs
  • Neel Mehta -   -


Direct URL: http://osvdb.org/8290