Fortinet FortiClient VPN Connection Name Local Format String Vulnerability
BID:34343
Info
Fortinet FortiClient VPN Connection Name Local Format String Vulnerability
| Bugtraq ID: | 34343 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-1262 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 02 2009 12:00AM |
| Updated: | Apr 17 2009 11:06PM |
| Credit: | Deral Heiland from Layered Defense |
| Vulnerable: |
Fortinet FortiClient 3.0.614 |
| Not Vulnerable: |
Fortinet FortiClient 3.0 MR7 Patch 6 |
Discussion
Fortinet FortiClient VPN Connection Name Local Format String Vulnerability
Fortinet FortiClient is prone to a local format-string vulnerability because it fails to adequately sanitize user-supplied input before passing it to a formatted-printing function.
Successfully exploiting this issue will allow local attackers to execute arbitrary code with SYSTEM-level privileges, completely compromising the computer. Failed exploit attempts will likely result in a denial of service.
FortiClient 3.0.614 is vulnerable; other versions may also be affected.
Fortinet FortiClient is prone to a local format-string vulnerability because it fails to adequately sanitize user-supplied input before passing it to a formatted-printing function.
Successfully exploiting this issue will allow local attackers to execute arbitrary code with SYSTEM-level privileges, completely compromising the computer. Failed exploit attempts will likely result in a denial of service.
FortiClient 3.0.614 is vulnerable; other versions may also be affected.
Exploit / POC
Fortinet FortiClient VPN Connection Name Local Format String Vulnerability
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Fortinet FortiClient VPN Connection Name Local Format String Vulnerability
Solution:
Reports indicate that the vendor released FortiClient 3.0 MR7 Patch 6 to address this issue. Please contact the vendor for details.
Solution:
Reports indicate that the vendor released FortiClient 3.0 MR7 Patch 6 to address this issue. Please contact the vendor for details.
References
Fortinet FortiClient VPN Connection Name Local Format String Vulnerability
References:
References: