VulnCheck KEV: CVE-2016-6909

Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER...

CVE-2016-6909

A buffer overflow vulnerability exists in the Cookie parser of the Fortinet FortiOS web interface and FortiSwitch micro-programming software. The flaw is caused by improper validation and lack of boundary checks on user-submitted input, specifically when parsing cookies. This allows an unauthenti...