CVE-2008-1397

Affected product/versions: Check Point VPN-1 Power/UTM, NGX R60–R65 and NG AI R55. Vulnerability: remote authenticated users can cause a site-to-site VPN tunnel outage and possibly intercept traffic by configuring the local RFC1918 IP address to match an endpoint RFC1918 address, then using SecuR...

CVE-2008-1397: Undefined Security Weakness

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service site-to-site VPN tunnel outage, and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's...