CVE-2005-3058
CVE-2005-3058
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/27203no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.htmlhttp://secunia.com/advisories/18844https://exchange.xforce.ibmcloud.com/vulnerabilities/24626http://www.fortiguard.com/advisory/FGA-2006-10.htmlhttp://www.securityfocus.com/archive/1/424858/100/0/threadedhttp://www.securityfocus.com/bid/16599http://www.vupen.com/english/advisories/2006/0539