CVE:CVE-2004-2679
CNNVD:CNNVD-200412-941
Check Point Firewall-1 4.1版本直到NG AI R55版本存在漏洞。远程攻击者可以通过发送带有导致Firewall-1返回含版本及其他信息回复的某个Vendor ID负载的网络密钥交换(IKE)来获得潜在敏感信息。
solution:Upgrade checkpoint firewall-1 to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp7,4.0:sp8,4.1,4.1:sp1,4.1:sp2,4.1:sp3,4.1:sp4,4.1:sp5,4.1:sp5a,4.1:sp6,r55,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp7,4.0:sp8,4.1,4.1:sp1,4.1:sp2,4.1:sp3,4.1:sp4,4.1:sp5,4.1:sp5a,4.1:sp6,r55