CVE-2004-0040

Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.

• http://marc.info/?l=bugtraq&m=107604682227031&w=2
• http://www.ciac.org/ciac/bulletins/o-073.shtml
• http://www.kb.cert.org/vuls/id/873334Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/3821
• http://www.osvdb.org/4432
• http://www.securityfocus.com/bid/9582Patch, Vendor Advisory
• http://xforce.iss.net/xforce/alerts/id/163
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14150
• http://marc.info/?l=bugtraq&m=107604682227031&w=2
• http://www.ciac.org/ciac/bulletins/o-073.shtml
• http://www.kb.cert.org/vuls/id/873334Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/3821
• http://www.osvdb.org/4432
• http://www.securityfocus.com/bid/9582Patch, Vendor Advisory
• http://xforce.iss.net/xforce/alerts/id/163
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14150

Published

Mar 3, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0034Multiple cross-site scripting (XSS) vulnerabilities in Phoru…
• CVE-2004-0035SQL injection vulnerability in register.php for Phorum 3.4.5…
• CVE-2004-0036SQL injection vulnerability in calendar.php for vBulletin Fo…
• CVE-2004-0037FirstClass Desktop Client 7.1 allows remote attackers to exe…
• CVE-2004-0038McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2…
• CVE-2004-0039Multiple format string vulnerabilities in HTTP Application I…
• CVE-2004-0041The mod_auth_shadow module 1.4 and earlier does not properly…
• CVE-2004-0042vsftpd 1.1.3 generates different error messages depending on…
• CVE-2004-0043Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and ea…
• CVE-2004-0044Cisco Personal Assistant 1.4(1) and 1.4(2) disables password…
• CVE-2004-0045Buffer overflow in the ARTpost function in art.c in the cont…
• CVE-2004-0046Cross-site scripting (XSS) vulnerability in SnapStream PVS L…