|
FortiGate URL Filter and Virus Scanning Bypass Vulnerabilities
|
|
Secunia Advisory:
|
SA18844
|
|
|
Release Date:
|
2006-02-13
|
|
Last Update:
|
2008-05-15
|
|
Popularity:
|
14,458 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Security Bypass
|
|
Where:
|
From local network
|
|
Solution Status:
|
Partial Fix
|
|
| OS: | Fortinet FortiOS (FortiGate) 2.x
Fortinet FortiOS (FortiGate) 3.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Two vulnerabilities have been reported in FortiGate, which can be exploited by malicious people and users to bypass certain security restrictions.
1) The URL blocking functionality can be bypassed by specially-crafted HTTP requests that are terminated by the LF character instead of the CRLF characters. It is also possible to bypass the functionality via a HTTP/1.0 request with no host header or fragmented GET or POST requests.
The vulnerability has been reported in FortiOS v2.8MR10, v3beta, and in all FortiGate models running FortiGuard Web Filtering services.
2) An error exists in the FortiGate FTP proxy within the handling of the STOR command. This can be exploited to bypass the virus scanning functionality by an FTP client that proceeds to send the file content before the FTP server responds to the STOR command.
The vulnerability has been reported in FortiOS v2.8MR10, v3beta, and in all FortiGate models running FTP Anti-Virus scanning services.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
