CVE:CVE-2004-0699
CNNVD:CNNVD-200409-068
Check Point VPN-1产品的ASN.1译码库文件存在基于堆的缓冲区溢出漏洞。积极模式IKE生效时，远程攻击者可以通过初始化IKE协议并发送IKE畸形ASN.1数据包执行任意代码。
solution:Upgrade checkpoint firewall-1 to a higher version than 4.1:sp6,and avoid the version 4.1:sp6; Upgrade checkpoint vpn-1 to a higher version than *