CVE-2005-3058

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP…

published February 14, 2006

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03093 · 87.6th percentile
Published
2006-02-14T19:00Z
EPSS history
Timeline
  • 14 FEB 19:00Z
    Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP…
    cvelistv5