PT-2008-2397 · Fortinet · Forticlient Host Security

Ruben · Publicado 2008-02-14 · Atualizado 2018-10-15 · CVE-2008-0779

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiClient Host Security versions 3.0 MR5 Patch 3 and earlier

Description The issue is related to the fortimon.sys device driver, which does not properly initialize its DeviceExtension. This allows local users to access kernel memory and execute arbitrary code via a crafted request.

Recommendations For Fortinet FortiClient Host Security versions 3.0 MR5 Patch 3 and earlier, update to a version later than 3.0 MR5 Patch 3 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0779

Produtos afetados

Forticlient Host Security

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-0779 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0541/references · Aviso do Fabricante
• http://securityfocus.com/archive/1/488071/100/0/threaded · Nota
• http://kc.forticare.com/default.asp?id=3618 · Nota
• http://securitytracker.com/id?1019415 · Nota
• http://reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=47&Itemid=15 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40512 · Nota
• http://securityfocus.com/bid/27776 · Nota
• http://securityreason.com/securityalert/3660 · Nota
• http://secunia.com/advisories/28975 · Aviso do Fabricante