Lucene search
+L

CVE-2005-3058

🗓️ 14 Feb 2006 19:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 87 Views🌐 WEB

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an HTTP request terminated with a line feed (LF)

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2005-3058
14 Feb 200619:00
cvelist
exploitdb
Exploit DB
Fortinet Fortigate 2.x/3.0 - URL Filtering Bypass
13 Feb 200600:00
exploitdb
euvd
EUVD
EUVD-2005-3058
7 Oct 202500:30
euvd
nvd
NVD
CVE-2005-3058
31 Dec 200505:00
nvd
packetstorm
Packet Storm
Fortinet-url.txt
14 Feb 200600:00
packetstorm
prion
Prion
Hardcoded credentials
4 Sep 200910:30
prion
securityvulns
securityvulns
[Full-disclosure] URL filter bypass in Fortinet
13 Feb 200600:00
securityvulns
NVD
Node
OR
fortinetfortiosRange2.8_mr10
fortinetfortiosRange3_beta
Node
ParameterPositionPathDescriptionCWE
Hostheader/testBypass FortiGate URL filtering using a crafted HTTP request that misformats the request line/headers (e.g., LF instead of CRLF) to bypass the URL blocker.CWE-264
Hostheader/test2Bypass FortiGate URL filtering using a crafted HTTP request with non-standard/request line formatting to evade URL blocking.CWE-264
Hostheader/test3Bypass FortiGate URL filtering with an HTTP/1.0 request lacking proper CRLF handling to bypass the URL blocker.CWE-264
Hostheader/test4Bypass FortiGate URL filtering with an HTTP/1.0/Host header manipulation to evade the URL blocker.CWE-264

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation