NVD

Id
24365  
Name
CVE-2015-2281  
Description
Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary code via a large PROCESS_HELLO message to the Message Dispatcher on TCP port 8000.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-19  
Modified Date
2017-01-02  
Seq
2015-2281  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128925 24365 CVE-2015-2281 20150318 [CORE-2015-0006] - Fortinet Single Sign On Stack Overflow  View
128926 24365 CVE-2015-2281 http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow  View
128927 24365 CVE-2015-2281 http://www.fortiguard.com/advisory/2015-02-27-fsso-stack-based-buffer-overflow  View
128928 24365 CVE-2015-2281 http://www.fortiguard.com/advisory/FG-IR-15-006/  View
128929 24365 CVE-2015-2281 119719  View
128930 24365 CVE-2015-2281 20150318 [CORE-2015-0006] - Fortinet Single Sign On Stack Overflow  View
128931 24365 CVE-2015-2281 73206  View
128932 24365 CVE-2015-2281 36422  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6572 JVNDB-2015-001892 Fortinet Single Sign On の collectoragent.exe におけるスタックベースのバッファオーバーフローの脆弱性 Fortinet Single Sign On (FSSO) の collectoragent.exe には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-2281 79506 CVE-2015-2281 24365 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001892.html 2015-02-27 2015-03-24 View