7.5

CVE-2005-3058

EPSS 2.65%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fortinet ≫ FortiOS Version <= 2.8_mr10

Fortinet ≫ FortiOS Version <= 3_beta

Fortinet ≫ Fortigate Version2.8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.65%	0.854

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/18844

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0539

Vendor Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html

http://www.fortiguard.com/advisory/FGA-2006-10.html

http://www.securityfocus.com/archive/1/424858/100/0/threaded

http://www.securityfocus.com/bid/16599

https://exchange.xforce.ibmcloud.com/vulnerabilities/24626

https://nvd.nist.gov/vuln/detail/CVE-2005-3058

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3058

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3058

EUVD