PT-2005-3888 · Fortinet+1 · Fortigate+1

Mathieu Dessus · Published 2005-12-31 · Updated 2017-07-11 · CVE-2005-3057

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiGate versions prior to 3.0 MR1

Description The issue allows remote attackers to bypass the Fortinet FTP anti-virus engine. This can be achieved by sending a STOR command and uploading a file before the FTP server response has been sent. An example of this exploit has been demonstrated using LFTP.

Recommendations For versions prior to 3.0 MR1, update to version 3.0 MR1 or later to resolve the issue. As a temporary workaround, consider restricting access to the FTP component until a patch is available. Avoid using the FTP component for uploading files until the issue is resolved.

Fix

Related Identifiers

CVE-2005-3057

Affected Products

Fortigate

Lftp

References · 8

• http://secunia.com/advisories/18844 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0539 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3057 · Security Note
• http://securityfocus.com/bid/16597 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042139.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24624 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3057 · Note
• http://marc.info/?l=bugtraq&m=113986337408103&w=2 · Note