Secunia

ISS X-Force has discovered a vulnerability in various Check Point VPN-1 products, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the ASN.1 decoding library during setup of the initial encrypted connection. This can be exploited to cause a heap overflow by establishing a VPN connection and sending a malicious packet containing specially crafted fields.

Successful exploitation does not require any authentication and may allow execution of arbitrary code on a vulnerable system.

Solution
See original vendor advisory for updates.

Provided and/or discovered by
Mark Dowd and Neel Mehta, ISS X-Force.

Changelog
Further details available in Customer Area

Original Advisory
Check Point:
http://www.checkpoint.com/techsupport/alerts/asn1.html

ISS:
http://xforce.iss.net/xforce/alerts/id/178

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area