A vulnerability has been discovered in various Check Point VPN-1 products, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the ISAKMP implementation when negotiating VPN tunnels. This can be exploited to cause a buffer overflow via specially crafted packets, which may allow execution of arbitrary code.

Solution
The vendor has issued hotfixes (see original advisory).

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.checkpoint.com/techsupport/alerts/ike_vpn.html

Deep Links
Links available to Secunia VIM customers