Vulnerability CVE-2002-1623
Published: 2002-12-31   Modified: 2012-02-12

Description:
The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Checkpoint -> Vpn-1 firewall-1 

 References:
http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001223.html
http://marc.info/?l=bugtraq&m=103124812629621&w=2
http://marc.info/?l=bugtraq&m=103176164729351&w=2
http://www.checkpoint.com/techsupport/alerts/ike.html
http://www.kb.cert.org/vuls/id/886601
http://www.nta-monitor.com/news/checkpoint.htm
http://www.securiteam.com/securitynews/5TP040U8AW.html
http://www.securityfocus.com/archive/1/290202
http://www.securityfocus.com/bid/5607
https://exchange.xforce.ibmcloud.com/vulnerabilities/10034
Copyright 2024, cxsecurity.com

 

Back to Top