OSVDB ID: 26736 Title: FortiGate on Linux FTP EPSV Anti-Virus Scanning Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
FortiGate on Linux contains a flaw that may allow a malicious user to transfer malicious files over FTP. The issue is triggered when using the EPSV command. It is possible that the flaw may allow a virus, worm, or other malware to be transferred, resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Upgrade to version 2.80 MR12 or 3.0 MR2 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): disable EPSV file transfers. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |