Backdoor in Fortinet's firewall Fortigate

If you have console access to this box, you are able to get root access or more by using the Username: maintainer Password: pbcpbnhere should you type the serialnr. of the box, the characters should be in Capital letters. FortiOS: 2.x Regards Johan Andersson Atea Security, Sweden Phone: +46-709-1...

Fortinet Fortigate firewall backdoor account

maintainer/pbcpbnserial number account has local root access to device...

Fortinet FortiGate Web Console Management Detection

A Fortinet FortiGate Firewall is running on the remote host, and connections are allowed to its web-based console management port. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition to this, an attacker...

Multiple bugs in FortiGate

Multiple bugs in web interface...

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

[Full-Disclosure] exploiting fortigate firewall through webinterface

Issue: Several vulnerabilities in web interface of Fortigate firewall of which the most serious one will allow a remote attacker to obtain a username and password of the Fortigate. Release: pre 2.50 maintenance release 4 Fixed in: Fortinet OS 2.50 MR4, available from FTP as of 29 Sept. 2003 Date:...