PT-2015-3365 · Fortinet · Fortios

Publicado 2015-07-15 · Atualizado 2016-12-24 · CVE-2015-5965

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 4.3.13

Description The issue is related to the SSL-VPN feature, which only checks the first byte of the TLS MAC in finished messages. This makes it easier for remote attackers to spoof encrypted content via a crafted MAC field. The vulnerability is caused by errors in processing input data, allowing a remote attacker to substitute encrypted traffic with a specially formed MAC.

Recommendations For versions prior to 4.3.13, update to version 4.3.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the SSL-VPN feature until a patch is available. Avoid using the SSL-VPN feature in sensitive environments until the issue is resolved.

Correção

RCE

Enumeração de Fraquezas

CWE-20

CWE-310

Identificadores relacionados

BDU:2018-01294

CVE-2015-5965

Produtos afetados

Fortios

Referências · 9

• http://fortiguard.com/advisory/FG-IR-15-016 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-5965; · Nota de Segurança
• https://security.gentoo.org/glsa/201508-01 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01294 · Nota de Segurança
• https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5965 · Nota de Segurança
• https://securityfocus.com/bid/76065; · Nota
• http://securityfocus.com/bid/76065 · Nota
• http://securitytracker.com/id/1033256 · Nota