KLA10493 Code execution vulnerability in Fortinet SSO

Detect date:

03/19/2015

Severity:

Critical

Description:

Stack based buffer overflow was found in FSSO. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message.

Affected products:

Fortinet Single Sign On versions earlier then build 164

Solution:

Update to latest version!

Original advisories:

Fortinet advisory

Impacts:

ACE

Related products:

Fortinet Single Sign On

CVE-IDS:

CVE-2015-22817.5Critical

Exploitation:

Public exploits exist for this vulnerability.