Lucene search
HistoryMar 03, 2004 - 5:00 a.m.
CVE-2004-0040
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.2
Confidence
High
EPSS
0.06
Percentile
93.5%
Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.
Affected configurations
Node
checkpointfirewall-1Match4.1
ORcheckpointfirewall-1Match4.1sp1
ORcheckpointfirewall-1Match4.1sp2
ORcheckpointfirewall-1Match4.1sp3
ORcheckpointfirewall-1Match4.1sp4
ORcheckpointfirewall-1Match4.1sp5
ORcheckpointfirewall-1Match4.1sp5a
ORcheckpointfirewall-1Matchnext_generation_fp0
ORcheckpointfirewall-1Matchnext_generation_fp1
ORcheckpointvpn-1Match4.1sp5a
ORcheckpointvpn-1Matchnext_generation_fp0
ORcheckpointvpn-1Matchnext_generation_fp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:* |
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:* |
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:* |
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:* |
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:sp4:*:*:*:*:*:* |
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:sp5:*:*:*:*:*:* |
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:sp5a:*:*:*:*:*:* |
| checkpoint | firewall-1 | next_generation_fp0 | cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:* |
| checkpoint | firewall-1 | next_generation_fp1 | cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:* |
| checkpoint | vpn-1 | 4.1 | cpe:2.3:a:checkpoint:vpn-1:4.1:sp5a:*:*:*:*:*:* |
Related
cert
cert
Check Point ISAKMP vulnerable to buffer overflow via Certificate Request
2004-02-05 00:00:00
cve
cve
CVE-2004-0040
2004-09-01 04:00:00
cvelist
cvelist
CVE-2004-0040
2004-09-01 04:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.2
Confidence
High
EPSS
0.06
Percentile
93.5%
Related for NVD:CVE-2004-0040