7.5

CVE-2005-3058

EPSS 5.69%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fortinet ≫ Fortios Version <= 2.8_mr10

Fortinet ≫ Fortios Version <= 3_beta

Fortinet ≫ Fortigate Version2.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.69%	0.894

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/18844

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0539

Vendor Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html

http://www.fortiguard.com/advisory/FGA-2006-10.html

http://www.securityfocus.com/archive/1/424858/100/0/threaded

http://www.securityfocus.com/bid/16599

https://exchange.xforce.ibmcloud.com/vulnerabilities/24626

https://nvd.nist.gov/vuln/detail/CVE-2005-3058

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3058

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3058

EUVD