{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "VPN-1/Firewall-1 VSX NG avec l\u0027application Intelligence ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1/Firewall-1 NG avec l\u0027application Intelligence R54 HFA-410 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1/Firewall-1 NG avec l\u0027application Intelligence R55 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1/Firewall-1 VSX ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1 SecuRemote/SecureClient NG avec l\u0027application Intelligence R56.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1/Firewall-1 NG FP3 HFA-325 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1/Firewall-1 GX ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLe protocole ISAKMP (Internet Security Association and Key Management\nProtocol) est un protocole d\u0027initialisation de communication utilis\u00e9 par\nle protocole IPSEC. Une vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans la mise en \u0153uvre\ndu protocole ISAKMP dans Checkpoint VPN-1 qui permet \u00e0 un utilisateur\nmal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance lors de la\nn\u00e9gociation d\u0027un tunnel VPN. Cette vuln\u00e9rabilit\u00e9 n\u0027affecte pas les\nutilisateurs n\u0027utilisant pas de solution VPN ou ayant une version mise \u00e0\njour pour VPN-1 Firewall-1 R55 HFA-03, R54 HFA-410, NG FP3 HFA-325 ou\nVPN-1 SecuRemote/SecureClient R56.\n\n## Solution\n\nAppliquer le correctif suivant la version affect\u00e9e (cf. Documentation).\n",
  "cves": [],
  "initial_release_date": "2004-05-05T00:00:00",
  "last_revision_date": "2004-05-05T00:00:00",
  "links": [
    {
      "title": "Alerte de s\u00e9curit\u00e9 Checkpoint du 04 Mai  2004 :",
      "url": "http://www.checkpoint.com/techsupport/alerts/ike_vpn.html"
    }
  ],
  "reference": "CERTA-2004-AVI-155",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-05-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans la mise en \u0153uvre du protocole\n`ISAKMP` dans Checkpoint VPN-1.\n",
  "title": "Vuln\u00e9rabilit\u00e9 ISAKMP dans Checkpoint VPN-1",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Alerte Checkpoint du 04 mai 2004",
      "url": null
    }
  ]
}