VP
Product
Vpn-1
14
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Vpn-1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: next_generation_fp0; next_generation_fp1; next_generation_fp2; vsx_ng_with_application_intelligence |
| CVE-2011-1827 | – | Oct 5 | Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6,… Affected: r65.70; r70.40; r71.30; r75 |
| CVE-2008-5849 | – | Jan 6 | Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP addresses via a packet with a small… Affected: r55; r65 |
| CVE-2008-1397 | – | Mar 20 | Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and… Affected: ngx_r60 |
| CVE-2006-0255 | – | Jan 18 | Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which… Affected: 4.1; 4.1; 4.1; 4.1; 4.1; 4.1; +2 more |
| CVE-2005-3673 | – | Nov 18 | The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as… Affected: ngx_r60 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: next_generation; next_generation_fp0; next_generation_fp1; vsx_ng_with_application_intelligence |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: next_generation_fp0; next_generation_fp1; next_generation_fp2; vsx_ng_with_application_intelligence |
| CVE-2004-0699 | – | Sep 28 | Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by… Affected: All versions, or not specified |
| CVE-2004-0469 | – | Jul 7 | Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1… Affected: vsx_2.0.1; vsx_ng_with_application_intelligence |
| CVE-2004-0040 | – | Mar 3 | Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute… Affected: 4.1; next_generation_fp0; next_generation_fp1 |
| CVE-2001-1499 | – | Dec 31 | Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used,… Affected: 4.1 |
| CVE-2001-1431 | – | Oct 8 | Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and… Affected: 4.1; 4.1 |
| CVE-2001-1176 | – | Jul 12 | Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control… Affected: 4.1; 4.1; 4.1 |
Showing 14