|
Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service
|
|
Secunia Advisory:
|
SA17621
|
|
|
Release Date:
|
2005-11-17
|
|
Last Update:
|
2005-11-21
|
|
Popularity:
|
9,118 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Partial Fix
|
|
| OS: | Check Point VPN-1/FireWall-1 NGX
|
|
| Software: | Check Point Express CI
Check Point FireWall-1 GX 3.x
Check Point VPN-1/Firewall-1 NG
Check Point VPN-1/FireWall-1 NG with Application Intelligence (AI)
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
A vulnerability has been reported in Check Point VPN-1/Firewall-1, which can be exploited by malicious users to cause a DoS (Denial of Service).
For more information:
SA17553
Successful exploitation reportedly requires that the attacker is able to perform a full IKE negotiation with the affected system and requires authentication.
The vulnerability has been reported in the following versions.
* VPN-1/Firewall-1 NG with AI R54 prior to HFA_417.
* VPN-1/Firewall-1 NG with AI R55 prior to HFA_16.
* VPN-1/Firewall-1 NG with AI R55W prior to HFA_04.
* VPN-1/Firewall-1 NG with AI R55P prior to HFA_06.
* VPN-1 Pro NGX R60 prior to HFA_01.
* Check Point Express CI R57.
* Firewall-1 GX 3.0.
Solution:
Install the latest HFA (HotFix Accumulator).
http://www.checkpoint.com/techsupport/hfa.html
The vendor reportedly will release hotfixes for Check Point Express CI and Firewall-1 GX 3.0 at a later date.
Note: Check Point versions prior to NG with AI R54 e.g. versions 4.1, NG, NG FP1, NG FP2 and NG FP3 are not vulnerable. The vulnerability also does not affect VPN-1 VSX, Provider-1, InterSpect, Connectra, VPN-1 Edge and the safe@ product line.
Changelog:
2005-11-21: Updated "Description", "Solution" and "Original Advisory" sections.
Original Advisory:
https://secureknowledge.us.checkpoint...riginalAction=solution&id=sk31316
Other References:
SA17553:
http://secunia.com/advisories/17553/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
