20080103 FortiGuard: URL Filtering Application Bypass Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/485794/100/200/threaded CVE-2008-7161
Fortinet Fortigate - CRLF Characters URL Filtering Bypass
Record summary
CVE-2008-7161 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBFortinet Fortigate - CRLF Characters URL Filtering BypassExploitDB exploitby DanuxNot analyzed1 file
References
520080104 Re: FortiGuard: URL Filtering Application Bypass Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/485813/100/200/threaded 27276vdb entry
http://www.securityfocus.com/bid/27276 fortinet-url-security-bypass(39684)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39684 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-7161