Description (CNA)
Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://fortiguard.com/advisory/FG-IR-16-023
- https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html
- http://www.securitytracker.com/id/1036643
- http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/40276/
- http://www.securityfocus.com/bid/92523
ADP enrichment
No English description supplied.
- http://fortiguard.com/advisory/FG-IR-16-023
- https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html
- http://www.securitytracker.com/id/1036643
- http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/40276/
- http://www.securityfocus.com/bid/92523