CVE-2004-0699

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/12177/
http://securitytracker.com/alerts/2004/Jul/1010799.html
http://www.checkpoint.com/techsupport/alerts/asn1.htmlPatch, Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-190.shtml
http://www.kb.cert.org/vuls/id/435358US Government Resource
http://www.osvdb.org/displayvuln.php?osvdb_id=8290
http://www.securityfocus.com/bid/10820
http://xforce.iss.net/xforce/alerts/id/178Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16824
http://secunia.com/advisories/12177/
http://securitytracker.com/alerts/2004/Jul/1010799.html
http://www.checkpoint.com/techsupport/alerts/asn1.htmlPatch, Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-190.shtml
http://www.kb.cert.org/vuls/id/435358US Government Resource
http://www.osvdb.org/displayvuln.php?osvdb_id=8290
http://www.securityfocus.com/bid/10820
http://xforce.iss.net/xforce/alerts/id/178Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16824

Timeline

Published: Sep 28, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-07007.5Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 m CVE-2004-07014.6Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly re CVE-2004-07025.0DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could all CVE-2004-07037.5Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to gr CVE-2004-07045.0Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hi CVE-2004-07056.8Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.CVE-2004-07062.1Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log CVE-2004-07077.5SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privile CVE-2004-07087.5MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has hi CVE-2004-07097.5HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote atta CVE-2004-07105.0IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 1 CVE-2004-07117.5The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/