Fortinet Advisory: Fortinet Discovers Microsoft Office Project Vulnerability

Fortinet Discovers Microsoft Office Project Vulnerability MS09-074 2009.December.08 Summary: Fortinet's FortiGuard Labs Discovers Memory Corruption Vulnerability in Microsoft Office Project. Impact: Remote Code Execution. Risk: Critical. Affected Software: For a list of operating system and produ...

CVE-2008-7161

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

Hardcoded credentials

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

CVE-2008-7161

CVE-2008-7161 affects Fortinet FortiGate-1000 appliances (FortiGuard Fortinet FortiGate-1000, 3.00 build 040075,070111). Affected component is the URL filtering mechanism. The root cause is the handling of HTTP/1.0 requests without a Host header, allowing remote attackers to bypass URL filtering ...

CVE-2008-7161

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

FortiGuard Advisory: Microsoft Office Web Components Remote Memory Corruption Vulnerability

Microsoft Office Web Components Remote Memory Corruption Vulnerability 2009.July.13 Fortinet's FortiGuard Global Security Research Team Discovers Memory Corruption Vulnerability in Microsoft Office Web Components. Summary: ======== A memory corruption vulnerability exists in the ActiveX Controls ...

FortiGuard Advisory: Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability

Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability 2009.June.09 Fortinet's FortiGuard Global Security Research Team Discovers Memory Corruption Vulnerability in Microsoft's Internet Explorer. Summary: ======== A memory corruption vulnerability exists in the DHTML...

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability  2009.April.08 Summary:  ======== Fortinet's FortiGuard Global Security Research Team has discovered a buffer overflow vulnerability in EMC RepliStor. Impact: ======= Remote code execution. Risk:  ===== Critical Affected Software: ...

Format string

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...

CVE-2009-1262

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...

CVE-2009-1262

Fortinet FortiClient 3.0.614 (and possibly earlier) contains a local format-string vulnerability in the handling of VPN connection names. The flaw allows a local user to read and write arbitrary memory with SYSTEM privileges by supplying crafted format specifiers, enabling code execution under SY...

CVE-2009-1262

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...

Fortinet FortiClient VPN连接名称本地格式串漏洞

BUGTRAQ ID: 34343 FortiClient是新一代个人电脑安全防护平台，拥有防病毒、防火墙、VPN等强大的功能。 FortiClient的VPN功能中存在本地格式串漏洞。如果用户在VPN连接名称中指定了特制的格式串标识符并初始化了这个连接的话，就可以触发这个漏洞，导致以System权限级别读写任意内存。 FortiClient 3.0.614 Fortinet -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.fortinetfirewall.com/index.php...

Oracle Secure Backup's observiced.exe Denial Of Service vulnerability

Oracle Secure Backup's observiced.exe Denial Of Service vulnerability 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers a vulnerability in observiced.exe of Oracle Secure Backup Summary: ======== A Denial Of Service vulnerability exists Oracle Secure Backup 10.2.0.2...

Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability

Oracle Secure Backup NDMPCONECTCLIENTAUTH Command Buffer Overflow Vulnerability 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Oracle Secure Backup Summary: ======== A Buffer Overflow vulnerability exists Oracle Secure Backup 10.2.0.2 through a...

Oracle Secure Backup Multiple Denial Of Service vulnerabilities

Oracle Secure Backup Multiple Denial Of Service vulnerabilities 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers multiple vulnerabilities in Oracle Secure Backup Summary: ======== Multiple Denial Of Service vulnerabilities exist Oracle Secure Backup 10.2.0.2 through...

CVE-2008-5531

Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

Design/Logic Flaw

Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5531

CVE-2008-5531 describes a family of bypasses where attackers manipulated an HTML document to defeat malware detection in IE6/IE7 by placing an MZ header (the “EXE info”) at the beginning and altering the displayed filename extension, e.g., no extension, .txt, or .jpg. The connected records indica...

CVE-2008-5531

Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...