CheckPoint VPN-1 IP Address Collision Security Issue - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

CheckPoint VPN-1 IP Address Collision Security Issue

Secunia Advisory:	SA29394
Release Date:	2008-03-18
Last Update:	2008-03-25

Critical:	Less critical
Impact:	Exposure of sensitive information DoS
Where:	From local network
Solution Status:	Vendor Patch

Software:	Check Point VPN-1 Power NGX Check Point VPN-1 UTM NGX Check Point VPN-1/FireWall-1 NG with Application Intelligence (AI)

CVE reference:	CVE-2008-1397 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Robert Mitchell has reported a security issue in CheckPoint VPN-1, which can lead to a DoS (Denial of Service) or disclosure of sensitive information. The security issue is caused due to an error in the handling IP address collisions and can lead to a DoS or disclosure of sensitive information. The problem occurs when a remote access client has an IP address, which is also defined in the encryption domain of a gateway that has a site-to-site VPN tunnel to the gateway the client connects to. Solution: The vendor has issued hotfixes to resolve the issue (see vendor advisory for details). Provided and/or discovered by: Robert Mitchell Changelog: 2008-03-19: Added link to US-CERT. 2008-03-25: Added CVE reference. Original Advisory: CheckPoint: https://secureknowledge.checkpoint.co...riginalAction=solution&id=sk34579 http://updates.checkpoint.com/fileser...E/VPN-1_NGX_R65_HFA02_Supplement3.pdf Robert Mitchell: http://puresecurity.com.au/index.php?action=fullnews&id=5 Other References: US-CERT VU#992585: http://www.kb.cert.org/vuls/id/992585



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

10 Related Secunia Security Advisories

1. Check Point Products ICS Security Bypass

2. Check Point VPN/Firewall Directory Traversal Vulnerability

3. Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service

4. Check Point Firewall CIFS Service Group Rule Bypass

5. Check Point Firewall-1 NG SmartDefense RFC2397 Bypass Weakness

6. Check Point VPN-1 ASN.1 Decoding Heap Overflow Vulnerability

7. Check Point VPN-1 Products ISAKMP Buffer Overflow Vulnerability

8. Check Point Products OpenSSL Vulnerabilities

9. Check Point FireWall-1 HTTP Parsing Format String Vulnerabilities

10. Check Point FireWall-1 H.323 Protocol Implementation Vulnerabilities

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Debian OpenSSL Predictable Random Number Generator and Update

2.	Blender Multiple Temporary File Security Issues

3.	Kostenloses Linkmanagements cript Multiple Vulnerabilities

4.	Symantec Altiris Deployment Solution Multiple Vulnerabilities

5.	Model Search "cat" SQL Injection Vulnerability

6.	Rantx "logininfo" Security Bypass Vulnerability

7.	Linux Kernel Multiple Vulnerabilities

8.	e107 BLOG Engine Plugin "rid" SQL Injection

9.	Pet Grooming Management System "useradded.php" Security Bypass

10.	68 Classifieds "cat" SQL Injection Vulnerability