Show plain JSON{"id": "CVE-2004-0469", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-07-07T04:00:00.000", "references": [{"url": "http://www.checkpoint.com/techsupport/alerts/ike_vpn.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10273", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16060", "source": "cve@mitre.org"}, {"url": "http://www.checkpoint.com/techsupport/alerts/ike_vpn.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10273", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16060", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en la funcionalidad ISAKMP de los productos Check Point VPN-1 y FireWall-1 NG, anteriores a VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 y NG FP3 HFA-325, o VPN-1 SecuRemote/SecureClient R56, puede permitir a atacantes remotos ejecutar c\u00f3digo arbitrario mediane una negociaci\u00f3n de tunel VPN."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"}, {"criteria": "cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C83ABA2-87CD-429B-9800-590F8256B064"}, {"criteria": "cpe:2.3:a:checkpoint:firewall-1:2.0.1:*:vsx:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E77F0C13-C65F-44DC-BD5D-A8F5CBF33F07"}, {"criteria": "cpe:2.3:a:checkpoint:next_generation:*:*:fp3:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "148E888C-9705-4015-ADF2-5863715D8041"}, {"criteria": "cpe:2.3:a:checkpoint:ng-ai:r54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9E1C23E-E495-4724-92AB-E1AB425FBB7D"}, {"criteria": "cpe:2.3:a:checkpoint:ng-ai:r55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60BC085B-508F-460F-8BE5-0B2842123DA8"}, {"criteria": "cpe:2.3:a:checkpoint:vpn-1:vsx_2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E5F3217-844F-41BB-8A7F-1D2F4445F3FE"}, {"criteria": "cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}