CVE

Id
14264  
CVE No.
CVE-2005-3058  
Status
Candidate  
Description
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.  
Phase
Assigned (20050926)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
106127 14264 CVE-2005-3058 BUGTRAQ:20060213 URL filter bypass in Fortinet  View
106128 14264 CVE-2005-3058 URL:http://www.securityfocus.com/archive/1/archive/1/424858/100/0/threaded  View
106129 14264 CVE-2005-3058 FULLDISC:20060213 URL filter bypass in Fortinet  View
106130 14264 CVE-2005-3058 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html  View
106131 14264 CVE-2005-3058 MISC:http://www.fortiguard.com/advisory/FGA-2006-10.html  View
106132 14264 CVE-2005-3058 BID:16599  View
106133 14264 CVE-2005-3058 URL:http://www.securityfocus.com/bid/16599  View
106134 14264 CVE-2005-3058 VUPEN:ADV-2006-0539  View
106135 14264 CVE-2005-3058 URL:http://www.vupen.com/english/advisories/2006/0539  View
106136 14264 CVE-2005-3058 SECUNIA:18844  View
106137 14264 CVE-2005-3058 URL:http://secunia.com/advisories/18844  View
106138 14264 CVE-2005-3058 XF:fortinet-web-filter-bypass(24626)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62342 JVNDB-2005-000544 IBM AIX の getconf コマンドにおけるバッファオーバーフローの脆弱性 IBM AIX の getconf コマンドにおいて、意図的なパラメータを指定してコマンドを実行されている場合に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-3060 14264 7.2 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000544.html  View