Fortinet FortiGate FTP ESPV security bypass
| fortinet-ftp-espv-security-bypass (27532) |  Medium Risk |
Description:
Fortinet FortiOS (FortiGate) using the FTP Anti-Virus gateway scanning service could allow a remote attacker to bypass security restrictions caused by an error in the FTP proxy when using Enhanced Passive FTP (EPSV). A remote attacker using a malicious FTP client could exploit this vulnerability to bypass security restrictions and upload malicious files to a victim's system.
Consequences:
Bypass Security
Remedy:
Refer to FortiGuard Advisory (FGA-2006-15) for upgrade information. See References.
References:
- FortiGuard Advisory (FGA-2006-15): Advisory - FTP Anti-Virus scanning application bypass vulnerability.
- Fortinet FortiOS Web site: Fortinet Award-Winning Products: complete, real-time network protection solutions.
- BID-18570: Fortinet FortiGate FTP Proxy Antivirus Engine Bypass Vulnerability
- CVE-2006-3222: The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode.
- OSVDB ID: 26736: FortiGate on Linux FTP EPSV Anti-Virus Scanning Bypass
- SA20720: FortiGate FTP Anti-Virus Scanning Bypass Vulnerability
- VUPEN/ADV-2006-2467: Fortinet FortiOS FTP EPSV Command AntiVirus Scanning Bypass Vulnerability
Platforms Affected:
- Fortinet Fortinet FortiOS (FortiGate) prior to 2.80 MR12
- Fortinet Fortinet FortiOS (FortiGate) prior to 3.0 MR2
Reported:
Jun 21, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net