CVE-2015-5735

CVE-2015-5735 affects Fortinet FortiClient before 5.2.4 via vulnerable drivers mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, and mdare64_52.sys. Using IOCTL 0x226108 allows a local user to write to arbitrary memory locations (kernel memory write). Fortinet released an updated FortiClient 5.2.4....

CVE-2015-4077

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...

CVE-2015-5736

Fortinet FortiClient (Windows) before 5.2.4 is affected by CVE-2015-5736 via the Fortishield.sys minifilter. The IOCTL calls 0x220024 and 0x220028 allow a non-user-supplied callback to be set, enabling a local user to execute code with kernel privileges through the registered callback during IRP_...

CVE-2015-5736

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...

CVE-2015-4077

Fortinet FortiClient 5.2.x affected drivers mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, and mdare64_52.sys. CVE-2015-4077 describes a local privilege escalation: IOCTL 0x22608C allows reading arbitrary kernel memory, enabling local users to read kernel contents. Fortinet fixed the issue in Fo...

CVE-2015-5735

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

CVE-2015-5737

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...

FortiClient Antivirus Multiple Vulnerabilities

None...

Mulitple Vulnerabilities in FortiClient

...

Fortinet FortiClient SSLVPN Linux Client Local Privilege Vulnerability

Fortinet FortiClient is a Fortinet security software solution for endpoints that provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication, etc. FortiClient SSLVPN Linux client is a Linux client software for SSL VPN Virtual Private Network products...

FortiClient SSLVPN Linux client local privilege escalation vulnerability

...

FortiClient Android and iOS multiple vulnerabilities

...

Fortinet FortiClient Man-in-the-Middle Attack Vulnerability (CNVD-2015-01147)

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. Fortinet FortiClient 5.2.3.091 for Android 5.2.028 for iOS suffers from a man-in-the-middle attack vulnerability that could allow an attacker to spoof a server wit...

Fortinet FortiClient Man-in-the-Middle Attack Vulnerability (CNVD-2015-01148)

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. Fortinet FortiClient 5.2.028 for iOS suffers from a man-in-the-middle attack vulnerability that allows attackers to spoof SSL VPN servers with a crafted certificat...

CVE-2015-1570

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2015-1569

Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate...

Design/Logic Flaw

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2015-1569

Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate...

CVE-2015-1570

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2015-1569

CVE-2015-1569 affects Fortinet FortiClient 5.2.028 for iOS, where certificate validation is not performed, enabling man-in-the-middle attackers to spoof SSL VPN servers with a crafted certificate. This is the explicit impact described in multiple connected sources; further exploitation details or...