7.5

CVE-2005-3058

EPSS 5.69%
Published 31.12.2005 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Fortinet ≫ Fortios Version <= 2.8_mr10

Fortinet ≫ Fortios Version <= 3_beta

Fortinet ≫ Fortigate Version2.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	5.69%	0.894

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/18844

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0539

Vendor Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html

http://www.fortiguard.com/advisory/FGA-2006-10.html

http://www.securityfocus.com/archive/1/424858/100/0/threaded

http://www.securityfocus.com/bid/16599

https://exchange.xforce.ibmcloud.com/vulnerabilities/24626

https://nvd.nist.gov/vuln/detail/CVE-2005-3058

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3058

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3058

EUVD