Approved changes feed: RSS · Atom

cpe:2.3:h:fortinet:fortigate:2.8:*:*:*:*:*:*:*

part: h version: 2.8 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortigate (c3c994df-e320-5ed2-8f74-48d2f63cff0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3058 vulnerable 2026-06-08 04:48:31.278691 Details available
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.
Published: 2006-02-14T19:00:00.000Z
Updated: 2024-08-07T22:53:30.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3057 vulnerable 2026-06-08 04:48:31.278255 Details available
The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP.
Published: 2006-02-14T19:00:00.000Z
Updated: 2024-08-07T22:53:30.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.