CVE-2004-0040: Check Point Firewall-1

High severity, CVSS 10.0. EPSS: 7.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.

Affected products

• Check Point Firewall-1: version 4.1 only; version next_generation_fp0 only; version next_generation_fp1 only
• Check Point VPN-1: version 4.1 only; version next_generation_fp0 only; version next_generation_fp1 only

Published 2004-03-03. Last modified 2026-06-16.