NVD

Id
1354  
Name
CVE-2008-1397  
Description
Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel"s endpoint RFC1918 IP addresses, and then using SecuRemote to connect to a network interface at the other endpoint.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-19  
Modified Date
2011-03-07  
Seq
2008-1397  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8729 1354 CVE-2008-1397 http://puresecurity.com.au/index.php?action=fullnews&id=5  View
8730 1354 CVE-2008-1397 VU#992585  View
8731 1354 CVE-2008-1397 http://www.puresecurity.com.au/files/PureSecurity%20VPN-1%20DoS_Spoofing%20Attack%20against%20VPN%20tunnels.pdf  View
8732 1354 CVE-2008-1397 28299  View
8733 1354 CVE-2008-1397 1019666  View
8734 1354 CVE-2008-1397 ADV-2008-0953  View
8735 1354 CVE-2008-1397 vpn1-ipaddress-dos(41260)  View
8736 1354 CVE-2008-1397 https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk34579  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45872 JVNDB-2008-001182 Check Point VPN-1 における IP アドレスの競合によるサービス運用妨害 (DoS) の脆弱性 Check Point VPN-1 には、RFC1918 の ローカル IP アドレスがトンネルの endpoint IP アドレスが同じである場合、また、他の endpoint でのネットワークインターフェース接続で SecuRemote を使用している場合、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-1397 31510 CVE-2008-1397 1354 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001182.html 2008-03-18 2008-04-03 View