CVE:CVE-2008-1397
CNNVD:CNNVD-200803-328
Check Point VPN-1 Power/UTM, 及 NGX R60至 R65 和 NG AI R55 软件会允许远程授权用户通过把本地RFC1918 IP地址与tunnel的 终端 RFC1918 IP 地址设置成一样，然后运行SecuRemote使其与另一终端的网络界面相连接，来造成拒绝服务(站到站的VPN 隧道损耗)。
solution:Upgrade checkpoint check_point_vpn-1_pro to a higher version than ngx_r61,ngx_r62_ga,and avoid the version ngx_r61,ngx_r62_ga; Upgrade checkpoint vpn-1 to a higher version than ngx_r60,and avoid the version ngx_r60; Upgrade checkpoint vpn-1_firewall-1 to a higher version than ng_ai_r55,and avoid the version ng_ai_r55; Upgrade checkpoint vpn-1_power_utm to a higher version than ngx_r65_with_messaging_security,and avoid the version ngx_r65_with_messaging_security; Upgrade checkpoint vpn-1_power_utm_with_ngx to a higher version than r65,and avoid the version r65