3.3.3

DATE	CVE	VULNERABILITY TITLE	RISK
2005-12-31	CVE-2005-3058	Permissions, Privileges, and Access Controls vulnerability in Fortinet Fortigate and Fortios Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616. network low complexity fortinet CWE-264	7.5
2005-12-31	CVE-2005-3057	Unspecified vulnerability in Fortinet Fortigate and Fortios The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP. network low complexity fortinet critical	10.0