CVE-2004-2679

CVE-2004-2679 describes an information disclosure vulnerability in Check Point Firewall-1 versions 4.1 up to NG AI R55. Remote attackers can exploit this by sending a specially crafted Internet Key Exchange (IKE) request with a specific Vendor ID payload, causing the firewall to reveal its version and other potentially sensitive information in the response. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to a complete compromise of confidentiality. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.