Fortinet FortiMail Server Detection via HTTP

Binary data 8737.prm...

Fortinet FortiMail Server Detection via POP3

Binary data 8730.prm...

Fortinet FortiMail Server Detection via IMAPS

Binary data 8735.prm...

Fortinet FortiMail Server Detection via SMTP

Binary data 8731.prm...

Fortinet FortiWeb < 5.3.5 Multiple Vulnerabilities

The remote host running a version of FortiWeb prior to 5.3.5. It is, therefore, affected by multiple vulnerabilities : - A command injection vulnerability exists due to a flaw that occurs when an administrator is executing reports. An authenticated, remote attacker can exploit this to execute...

Fortinet FortiMail < 5.0.9 / 5.1.6 / 5.2.4 HTTP Debug Information Disclosure

The remote host is running a version of FortiMail that is prior to 5.0.9 / 5.1.6 / 5.2.4. It is, therefore, affected by an information disclosure vulnerability due to HTTP debug commands improperly dumping user credentials in the debug logs. This allows a remote, authenticated attacker to disclos...

Fortinet FortiMail Information Disclosure Vulnerability

Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. An information disclosure vulnerability exists in Fortinet FortiMail. An attacker is allowed to exploit this vulnerability to...

Http debug commands in FortiMail exposes users credentials to admins

...

Fortinet FortiWEB Version Detection

Binary data 8648.prm...

Fortinet FortiWEB Detection via Telnet

Binary data 8647.prm...

Fortinet FortiWEB Detection via SSL/TLS

Binary data 8646.prm...

MongoDB Patches Remote Denial-of-Service Vulnerability

MongoDB, a popular NoSQL database used in big data and heavy analytics environments, has patched a serious denial-of-service vulnerability that is remotely exploitable. Companies using the default installation of MongoDB, which does not require authentication to access the database, are urged to...

Fortinet Single Sign On collectoragent.exe stack buffer overflow vulnerability

Fortinet Single Sign On FSSO is a single sign-on solution for Fortinet devices. A stack buffer overflow vulnerability in collectoragent.exe in versions prior to Fortinet Single Sign On FSSO build 164 allows remote attackers to send a specially crafted PROCESSHELLO message to TCP port 8000 to...

Fortinet Single Sign On Stack Overflow Exploit

Exploit for windows platform in category dos / poc 1. Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL: http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-...

CVE-2015-2281

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

Stack overflow

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

CVE-2015-2281

Fortinet Single Sign On (FSSO) collectoragent.exe is affected by a stack-based buffer overflow in the Message Dispatcher when processing a PROCESS_HELLO message. This vulnerable path exists in FSSO builds preceding 164 and allows remote, unauthenticated attackers to execute arbitrary code via a c...

CVE-2015-2281

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

KLA10493 Code execution vulnerability in Fortinet SSO

Stack based buffer overflow was found in FSSO. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message. Original advisories Fortinet advisory Exploitation Public exploits exist for this vulnerabilit...

Fortinet Single Sign On Stack Overflow

Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL: http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-18 Vendors contacted: Fortinet Release mode:...