vulnwire
7.5high

CVE-2005-30581 exploit

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker vi…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.1%
percentile 88%
Public exploits
1
Exploit-DB

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.

Exploit prediction (EPSS)

3.09% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

Exploits and detections

  • EDB-27203 Fortinet Fortigate 2.x/3.0 - URL Filtering Bypass · remote · 2006-02-13

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
Technology feeds
Fortinet (RSS, critical only)

References

  • lists.grok.org.uk /pipermail/full-disclosure/2006-February/042140.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • securityfocus.com /archive/1/424858/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/24626 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/16599 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/18844 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • fortiguard.com /advisory/FGA-2006-10.html · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2006/0539 · vdb-entry, x_refsource_VUPEN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.