CVE-2004-0699: Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IK...

Security readout for executives and security teams

This is a remote code execution risk in legacy Check Point VPN-1 systems. A vulnerable VPN gateway using Aggressive Mode IKE could be compromised through malformed ASN.1 data. Because VPN gateways often sit at the network edge, confirmed exposure should be treated as urgent even though the bundle provides no CVSS score. Likely exposure is limited to organizations still running affected Check Point VPN-1 products with Aggressive Mode IKE enabled. Internet-facing VPN gateways are the highest concern. The source bundle does not identify exact versions, CPEs, or supported product names beyond Check Point VPN-1 products. Prioritize confirmation quickly if any legacy Check Point VPN-1 infrastructure remains. This is old, but edge VPN remote code execution can create direct business risk. If the product is no longer deployed, document non-exposure and close with evidence. Mitigation focus: Review Check Point’s ASN.1 advisory for the vendor-supported fix or workaround.; Identify and retire unsupported Check Point VPN-1 deployments where feasible.; Disable Aggressive Mode IKE if vendor guidance allows and business requirements permit..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.