A remote overflow exists in Checkpoint VPN-1/Firewall-1 software. Checkpoint VPN-1/FireWall-1 software fails to properly santize ASN.1 decoding during the initial VPN tunnel encryption setup over ISAKMP resulting in a heap overflow. With a specially crafted request, an attacker can compromise the server resulting in a loss of confidentiality and integrity.
Classification
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Unavailable
Disclosure:
OSVDB Verified
OSVDB:
Security Software
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, Checkpoint has released patches for each corresponding version to address this vulnerability.
avertlabs.com - McAfee Avert(tm) Labs