CVE-2008-1397

Published: Mar 20, 2008Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's endpoint RFC1918 IP addresses, and then using SecuRemote to connect to a network interface at the other endpoint.

Affected (6)

Products: Checkpoint: Check Point Vpn 1 Pro, Vpn 1, Vpn 1 Firewall 1, Vpn 1 Power Utm, Vpn 1 Power Utm With Ngx

5 products

Check Point Vpn 1 Pro

Vpn 1 Firewall 1

Vpn 1 Power Utm

Vpn 1 Power Utm With Ngx

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Check Point Vpn 1 Pro	Version ngx_r61
Checkpoint Check Point Vpn 1 Pro	Version ngx_r62_ga
Checkpoint Vpn 1	Version ngx_r60
Checkpoint Vpn 1 Firewall 1	Version ng_ai_r55
Checkpoint Vpn 1 Power Utm	Version ngx_r65_with_messaging_security
Checkpoint Vpn 1 Power Utm With Ngx	Version r65

Related CWEs

References (18)

http://puresecurity.com.au/index.php?action=fullnews&id=5

Source: cve@mitre.org

http://secunia.com/advisories/29394

Source: cve@mitre.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/992585

Source: cve@mitre.org

US Government Resource

http://www.puresecurity.com.au/files/PureSecurity%20VPN-1%20DoS_Spoofing%20Attack%20against%20VPN%20tunnels.pdf

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/28299

Source: cve@mitre.org

http://www.securitytracker.com/id?1019666

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0953/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41260

Source: cve@mitre.org

https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk34579

Source: cve@mitre.org

Patch

http://puresecurity.com.au/index.php?action=fullnews&id=5

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29394

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.kb.cert.org/vuls/id/992585

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.puresecurity.com.au/files/PureSecurity%20VPN-1%20DoS_Spoofing%20Attack%20against%20VPN%20tunnels.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/28299

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019666

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0953/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/41260

Source: af854a3a-2127-422b-91ae-364da2661108

https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk34579

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.