7.5

CVE-2005-3058

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortinet ≫ FortiOS Version <= 2.8_mr10
Fortinet ≫ FortiOS Version <= 3_beta
Fortinet ≫ Fortigate Version2.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.1% 0.861
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/18844
Vendor Advisory
http://www.vupen.com/english/advisories/2006/0539
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html
http://www.fortiguard.com/advisory/FGA-2006-10.html
http://www.securityfocus.com/archive/1/424858/100/0/threaded
http://www.securityfocus.com/bid/16599
https://exchange.xforce.ibmcloud.com/vulnerabilities/24626