Vulnerabilities > CVE-2006-3222 - Unspecified vulnerability in Fortinet Fortios

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

fortinet

NVD

Published: 2006-06-24

Updated: 2017-07-20

Summary

The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode.

Vulnerable Configurations

Part	Description	Count
OS	Fortinet Fortinet Fortios 2.5_0Mr4 Fortinet Fortios 2.8_Mr10 Fortinet Fortios 2.36 Fortinet Fortios 2.50 Fortinet Fortios 2.50_Mr5 Fortinet Fortios 2.80 Fortinet Fortios 3.0 Fortinet Fortios 3.0_Beta Fortinet Fortios 3.0_Mr1	9

References

http://attrition.org/pipermail/vim/2006-July/000921.html
http://secunia.com/advisories/20720
http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html
http://www.osvdb.org/26736
http://www.securityfocus.com/bid/18570
http://www.vupen.com/english/advisories/2006/2467
https://exchange.xforce.ibmcloud.com/vulnerabilities/27532