ByteOS Network

NVD Vulnerability Details :

CVE-2005-3058

Deferred

Source-cve@mitre.org

Published At-31 Dec, 2005 | 05:00

Updated At-03 Apr, 2025 | 01:03

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Fortinet, Inc.

>>fortios>>Versions up to 2.8_mr10(inclusive)

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Fortinet, Inc.

>>fortios>>Versions up to 3_beta(inclusive)

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Fortinet, Inc.

>>fortigate>>2.8

cpe:2.3:h:fortinet:fortigate:2.8:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html	cve@mitre.org	N/A
http://secunia.com/advisories/18844	cve@mitre.org	Vendor Advisory
http://www.fortiguard.com/advisory/FGA-2006-10.html	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/424858/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/16599	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2006/0539	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24626	cve@mitre.org	N/A
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/18844	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.fortiguard.com/advisory/FGA-2006-10.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/424858/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/16599	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2006/0539	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24626	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History