Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
| Software | From | Fixed in |
|---|---|---|
| checkpoint / firewall-1 | - | - |
| checkpoint / firewall-1 | 2.0 | 2.0.x |
| checkpoint / firewall-1 | 2.0.1 | 2.0.1.x |
| checkpoint / vpn-1 | vsx_2.0.1 | vsx_2.0.1.x |
| checkpoint / vpn-1 | vsx_ng_with_application_intelligence | vsx_ng_with_application_intelligence.x |
| checkpoint / next_generation | - | - |
| checkpoint / ng-ai | r54 | r54.x |
| checkpoint / ng-ai | r55 | r55.x |