Secunia

Robert Mitchell has reported a security issue in CheckPoint VPN-1, which can lead to a DoS (Denial of Service) or disclosure of sensitive information.

The security issue is caused due to an error in the handling IP address collisions and can lead to a DoS or disclosure of sensitive information.

The problem occurs when a remote access client has an IP address, which is also defined in the encryption domain of a gateway that has a site-to-site VPN tunnel to the gateway the client connects to.

Solution
The vendor has issued hotfixes to resolve the issue (see vendor advisory for details).

Provided and/or discovered by
Robert Mitchell

Changelog
Further details available in Customer Area

Original Advisory
CheckPoint:
https://secureknowledge.checkpoint.com/SecureKnowledge/login.do?OriginalAction=solution&id=sk34579
http://updates.checkpoint.com/fileserver/ID/8141/FILE/VPN-1_NGX_R65_HFA02_Supplement3.pdf

Robert Mitchell:
http://puresecurity.com.au/index.php?action=fullnews&id=5

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area