Fortinet FortiGate FTP Proxy Antivirus Engine Bypass Vulnerability

Bugtraq ID:	18570
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 21 2006 12:00AM
Updated:	Jun 21 2006 10:35PM
Credit:	The vendor credits an undisclosed magazine test review article for the original disclosure of this issue.
Vulnerable:	Fortinet FortiOS 3.0 beta Fortinet FortiOS 3.0 Fortinet FortiOS 2.80 Fortinet FortiOS 2.50 MR5 Fortinet FortiOS 2.50 Fortinet FortiOS 2.36 Fortinet FortiOS 2.8 MR10 Fortinet FortiOS 2.5 0MR4 Fortinet FortiOS 3.0 MR1
Not Vulnerable:	Fortinet FortiOS 3.0 MR2 Fortinet FortiOS 2.80 MR12

Fortinet FortiGate FTP Proxy Antivirus Engine Bypass Vulnerability

Fortinet FortiGate is prone to a vulnerability that allows an attacker to bypass antivirus protection. This issue occurs when files are transferred using the FTP protocol under certain conditions.

Fortinet FortiOS versions prior to 2.80 MR12 and 3.0 MR2 are vulnerable to this issue if the FTP antivirus gateway-scanning service is used.

Fortinet FortiGate FTP Proxy Antivirus Engine Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Fortinet FortiGate FTP Proxy Antivirus Engine Bypass Vulnerability

Solution:
The vendor has released an advisory along with fixes to address this issue. Please see the referenced advisory for information on obtaining fixes.

Fortinet FortiGate FTP Proxy Antivirus Engine Bypass Vulnerability

References:

• FortiGuard Advisory (FGA-2006-15) (Fortinet)
  
• Fortinet Homepage (Fortinet)