Check Point VPN-1 ASN.1 Decoding Heap Overflow Vulnerability - Secunia Advisories - Vulnerability Information

Vulnerability Information

Vulnerability Scanning

Community

Blog - new entry!

Corporate Information

Home > Vulnerability Information > Secunia Advisories > Check Point VPN-1 ASN.1 Decoding Heap Overflow Vulnerability

Secunia Advisories

Advisories

Advisories by Product

Business Solutions Restricted

Partner Solutions Restricted

About

Check Point VPN-1 ASN.1 Decoding Heap Overflow Vulnerability

Secunia Advisory:

SA12177

Advisory Toolbox:

Issue ticket

Save in to-do list

Mark as handled

Exploit information

Download as PDF

Review actions

Add comment

Release Date:

2004-07-29

Last Update:

2004-08-03

Popularity:

12,102 views

Critical:

Highly critical

Impact:

System access

Where:

From remote

Solution Status:

Vendor Patch

Software:

Check Point FireWall-1 GX 2.x
Check Point Provider-1
Check Point SSL Network Extender
Check Point VPN-1 SecureClient
Check Point VPN-1 SecuRemote
Check Point VPN-1/Firewall-1 NG
Check Point VPN-1/FireWall-1 NG with Application Intelligence (AI)
Check Point VPN-1/FireWall-1 VSX NG

Secunia CVSS-2 Score:

Available in Secunia business solutions

Subscribe:

Instant alerts on relevant vulnerabilities

Advisory Content (Page 2 of 3)

[ 1 ] [ 2 ] [ 3 ]

Secunia is hiring, read about the open positions here!

Solution:
See original vendor advisory for updates.

Provided and/or discovered by:
Mark Dowd and Neel Mehta, ISS X-Force.

Changelog:
2004-08-03: Added link to US-CERT vulnerability note.

Original Advisory:
Check Point:
http://www.checkpoint.com/techsupport/alerts/asn1.html

ISS:
http://xforce.iss.net/xforce/alerts/id/178

Other References:
US-CERT VU#435358:
http://www.kb.cert.org/vuls/id/435358

Change Page:
[ 1 ] [ 2 ] [ 3 ]

Track this Secunia Advisory

Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory

Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	41
New vulnerabilities:	122
Updated advisories:	72

Less // 88 views

HB-NS NewsScript "topic" Cross-Site Scripting Vulnerability

Moderately // 89 views

PyForum Multiple Vulnerabilities

Less // 125 views

IBM WebSphere Application Server JAAS-J2C Authentication Data Disclosure

Highly // 107 views

Red Hat update for xpdf

Highly // 107 views

Red Hat update for gpdf

Moderately // 69 views

Digital Scribe Cross-Site Scripting and SQL Injection Vulnerabilities

Moderately // 134 views

Mozilla Thunderbird JavaScript Engine Memory Corruption

Highly // 114 views

Sun Solaris Adobe Flash Player Multiple Vulnerabilities

Less // 121 views

Sun Solaris 10 "mod_perl" Cross-Site Scripting Vulnerability

Less // 101 views

Sun Solaris "mod_perl" Cross-Site Scripting Vulnerability

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1.	Mozilla Firefox Multiple Vulnerabilities // 213 views
2.	Adobe Reader/Acrobat "Doc.media.newPlayer()" Memory Corruption // 157 views
3.	Adobe Flash Player Multiple Vulnerabilities // 141 views
4.	Mozilla Thunderbird JavaScript Engine Memory Corruption // 44 views
5.	Sun Solaris Adobe Flash Player Multiple Vulnerabilities // 40 views
6.	CA Cohesion Application Configuration Manager Apache Tomcat Multiple Vulnerabilities // 39 views
7.	VMware vCenter Lab Manager WebWorks Help Cross-Site Scripting // 38 views
8.	HB-NS NewsScript "topic" Cross-Site Scripting Vulnerability // 36 views
9.	Sun Solaris "mod_perl" Cross-Site Scripting Vulnerability // 36 views
10.	IBM WebSphere Application Server JAAS-J2C Authentication Data Disclosure // 35 views