{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "VPN-1 Pro NGX R61 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1 / Firewall-1 NG with AI R55 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1 Power / UTM NGX R65 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1 Pro NGX R62 GA ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1 Pro NGX R60 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VPN-1 Power / UTM NGX R65 with Messaging Security.",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 permettant \u00e0 une personne malveillante de cause un\nd\u00e9ni de service \u00e0 distance et/ou de porter atteinte \u00e0 la confidentialit\u00e9\ndes donn\u00e9es a \u00e9t\u00e9 d\u00e9couverte dans Checkpoint VPN-1. Cette faille\nconcerne le sc\u00e9nario suivant :\n\n-   deux passerelles A et B sont connect\u00e9es et forment un tunnel VPN ;\n-   une machine C se connecte \u00e0 la passerelle A. Elle a une IP qui est\n    \u00e9galement d\u00e9finie dans le domaine de chiffrement de la passerelle B,\n    ce qui cause des collisions ;\n-   les nouvelles connexions destin\u00e9es \u00e0 l\u0027IP du domaine de chiffrement\n    seront alors transf\u00e9r\u00e9es \u00e0 la machine C.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs ou des changements \u00e0 apporter dans la configuration (cf.\nsection Documentation).\n",
  "cves": [],
  "initial_release_date": "2008-03-19T00:00:00",
  "last_revision_date": "2008-03-19T00:00:00",
  "links": [],
  "reference": "CERTA-2008-AVI-149",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-03-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans Checkpoint VPN-1 permet \u00e0 une personne\nmalintentionn\u00e9e de causer un d\u00e9ni de service \u00e0 distance et/ou de porter\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Checkpoint VPN-1",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Checkpoint sk34579 du 18 mars 2008",
      "url": "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk34579"
    }
  ]
}