← Vulnerability feed

Vulnerability record · CVE-2005-3673 · published 18 November 2005

CVE-2005-3673: Checkpoint check point vulnerability

Checkpoint · Check Point

The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

7.8 CVSS 2.0 High EPSS 4.9% · top 8.2%
7.8CVSS 2.0 base score
4.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://jvn.jp/niscc/NISCC-273756/index.html
http://secunia.com/advisories/17621
http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31316
http://securitytracker.com/id?1015235
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
http://www.kb.cert.org/vuls/id/226364 Third Party AdvisoryUS Government Resource
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en Vendor Advisory
http://www.securityfocus.com/bid/15479
http://www.vupen.com/english/advisories/2005/2470
http://jvn.jp/niscc/NISCC-273756/index.html
http://secunia.com/advisories/17621
http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31316
http://securitytracker.com/id?1015235
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
http://www.kb.cert.org/vuls/id/226364 Third Party AdvisoryUS Government Resource
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en Vendor Advisory
http://www.securityfocus.com/bid/15479
http://www.vupen.com/english/advisories/2005/2470

Track CVE-2005-3673 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0469Checkpoint firewall-1 vulnerabilityBuffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG …EPSS 5.0%10.0CVE-2004-0039Checkpoint firewall-1 vulnerabilityMultiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point F…EPSS 9.3%10.0CVE-2004-0040Checkpoint firewall-1 vulnerabilityStack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows…EPSS 7.6%9.3CVE-2011-1827Checkpoint connectra ngx vulnerabilityMultiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by S…EPSS 4.5%7.8CVE-2004-2679Checkpoint firewall-1 vulnerabilityCheck Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (I…EPSS 1.5%7.5CVE-2004-0079Cisco firewall services module null pointer dereference vulnerabilityThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) vi…EPSS 9.5%7.5CVE-2004-0699Checkpoint firewall-1 vulnerabilityHeap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers …EPSS 5.9%7.5CVE-2002-0428Checkpoint check point vpn vulnerabilityCheck Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire v…EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2005-3673), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.