exploitDog

CVE-2005-3057

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Версия до 2.8_mr10 (включая)

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Версия до 3_beta (включая)

Конфигурация 2

cpe:2.3:h:fortinet:fortigate:2.8:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01881

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-xf9f-9v6p-v639

github

почти 4 года назад

The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP.

EPSS

Процентиль: 83%

0.01881

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo