ID de Prueba:	1.3.6.1.4.1.25623.1.0.105886
Categoría:	Web application abuses
Título:	Fortinet FortiGate Cookie Parser Buffer Overflow Vulnerability (FG-IR-16-023) - Active Check
Resumen:	FortiGate firmware (FOS) released before Aug 2012 has a cookie parser buffer overflow vulnerability.
Descripción:	Summary: FortiGate firmware (FOS) released before Aug 2012 has a cookie parser buffer overflow vulnerability. Vulnerability Impact: This vulnerability, when exploited by a crafted HTTP request, can result in execution control being taken over. Affected Software/OS: FortiGate (FOS): 4.3.8 and below 4.2.12 and below 4.1.10 and below Solution: Update to release 5.x. Upgrade to release 4.3.9 or above for models not compatible with FortiOS 5.x. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6909 BugTraq ID: 92523 http://www.securityfocus.com/bid/92523 https://www.exploit-db.com/exploits/40276/ http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html http://www.securitytracker.com/id/1036643
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.