Удаленнное переполнение буфера в Check Point VPN-1

Описание: Переполнение буфера обнаружено в Check Point VPN-1. Удаленный пользователь может выполнить произвольный код на VPN системе.

Переполнение буфера обнаружено в Check Point VPN-1 в обработке ISAKMP пакетов в процессе установления VPN туннеля. Удаленный пользователь может выполнить произвольный код на целевой системе и, в некоторых случаях, скомпрометировать защищаемую сеть.

URL производителя: http://www.checkpoint.com/techsupport/alerts/ike_vpn.html

Решение:Установите соответствующее обновление:

VPN-1/FireWall-1 NG with Application Intelligence R55
Hotfix HFA-03

R55 HFA-03 for IPSO
http://www.checkpoint.com/techsupport/downloadApp/displ ayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application%20
Intelligence&os_selected=IPSO%203.7&patchlevel_selected=R55%20-%20Hotfixes

R55 HFA-03 for Linux
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application% 20
Intelligence&os_selected=Linux&patchlevel_selected=R55%20-%20Hotfixes

R55 HFA-03 for SecurePlatform
http://www.checkpoint.com/techsupport/downloadApp/display Downloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application%20
Intelligence&os_selected=SecurePlatform&patchlevel_selected=R55%20-%20Hotfixes

R55 HFA-03 for Solaris
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Applicat ion%20
Intelligence&os_selected=Solaris%202.8&patchlevel_selected=R55%20-%20Hotfixes

R55 HFA-03 for Windows
http://www.checkpoint.com/techsupport/downloadApp/di splayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application%20
Intelligence&os_selected=Windows%20NT&patchlevel_selected=R55%20-%20Hotfixe s


VPN-1/FireWall-1 NG with Application Intelligence R54 HFA-410

R54 HFA-410 for IPSO
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp? 
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application%20
Intelligence&os_selected=IPSO%203.7&patchlevel_selected=R54%20-%20Hotfixes

R54 HFA-410 for Linux
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application% 20
Intelligence&os_selected=Linux&patchlevel_selected=R54%20-%20Hotfixes

R54 HFA-410 for SecurePlatform
http://www.checkpoint.com/techsupport/downloadApp/displa yDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application%20
Intelligence&os_selected=SecurePlatform&patchlevel_selected=R54%20-%20Hotfixes


R54 HFA-410 for Solaris
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Applic ation%20
Intelligence&os_selected=Solaris%202.8&patchlevel_selected=R54%20-%20Hotfixes

R54 HFA-410 for Windows
http://www.checkpoint.com/techsupport/downloadApp /displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application%20
Intelligence&os_selected=Windows%20NT&patchlevel_selected=R54%20-%20Hotf ixes


VPN-1/FireWall-1 Next Generation FP3 HFA-325

FP3 HFA-325 for IPSO
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp?
the_product= VPN-1/FireWall-1&version_selected=NG&os_selected=IPSO%203.6&
patchlevel_selected=FP3%20-%20Hotfixes

FP3 HFA-325 for Linux
http://www.checkpoint.com/techsupport/ downloadApp/displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=Linux&
patchlevel_selected=FP3%20-%20Hotfixes

FP3 HFA-325 for SecurePlatform
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG&os_selected= SecurePlatform%20FP3%20Edition%202&
patchlevel_selected=FP3%20-%20Hotfixes

FP3 HFA-325 for Solaris
http://www.checkpoint.com/techsupport/downloadApp/displayDown loads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=Solaris%202.8&
patchlevel_selected=FP3%20-%20Hotfixes

FP3 HFA-325 for Windows
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp?
the_product=VPN-1/FireWall-1&version_selected=NG&os_selected=Windows %20NT&
patchlevel_selected=FP3%20-%20Hotfixes


VPN-1/FireWall-1 VSX NG with Application Intelligence Hotfix

VSX NG with Application Intelligence HF for SecurePlatform
http://www.checkpoint.com/support/downloads/bin/vpn_des/vsx/ngai/linux/vpn_hf_vsx_ngai_april_2004_linux.zip


VPN- 1/FireWall-1 VSX 2.0.1 Hotfix

VSX 2.0.1 HF for SecurePlatform
http://www.checkpoint.com/support/downloads/bin/vpn_des/vsx/2.0.1/linux/vpn_hf_vsx_201_april_2004_l inux.zip


FireWall-1 GX 2.0 Hotfix

GX 2.0 HF for IPSO
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/ipso/cp_ike_hotfix_apr_2004_gx20_ipso.g z

GX 2.0 HF for Linux
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/linux/cp_ike_hotfix_apr_2004_gx20_linux.gz

GX 2.0 HF for SecurePlatform
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/linux/cp_ike_hotfix_apr_2004_gx20_linux.gz

GX 2.0 HF for Solaris
http://www.checkpoint.com/support/downloads/bin/vpn_des/gx/v2.0/solaris/cp_ike_hotfix_apr_2004_gx20_solaris2.gz


VPN-1 SecuRemote/SecureClient NG with Application Intelligence R56

Free Public Downloads
http://www.checkpoint.com/techsupport/freedownloads.html

Ссылки:
ISAKMP Vulnerability