CVE-2009-1262

Опубликовано: 07 апр. 2009

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name.

Ссылки

http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html
http://osvdb.org/53266
http://secunia.com/advisories/34524
Vendor Advisory
http://www.layereddefense.com/FortiClient02Apr.html
http://www.securityfocus.com/archive/1/502354/100/0/threaded
http://www.securityfocus.com/archive/1/502602/100/0/threaded
http://www.securityfocus.com/bid/34343
http://www.securitytracker.com/id?1021966
http://www.vupen.com/english/advisories/2009/0941
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49633
http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html
http://osvdb.org/53266
http://secunia.com/advisories/34524
Vendor Advisory
http://www.layereddefense.com/FortiClient02Apr.html
http://www.securityfocus.com/archive/1/502354/100/0/threaded
http://www.securityfocus.com/archive/1/502602/100/0/threaded
http://www.securityfocus.com/bid/34343
http://www.securitytracker.com/id?1021966
http://www.vupen.com/english/advisories/2009/0941
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49633

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:h:fortinet:forticlient:3.0.614:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00076

Низкий

7.2 High

CVSS2

Дефекты

CWE-134

Связанные уязвимости

GHSA-p9pf-5c8c-756m

github

почти 4 года назад