Summary
generated automatically from NVD dataFortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, contains an interpretation conflict that lets remote attackers bypass its URL blocker. The bypass works with an HTTP request ending in a line feed (LF) instead of CRLF, or with a request that omits the Host field, both of which most web servers still process without breaking RFC2616. The flaw is rated 7.5 (HIGH) under CVSS v2.0 and is tied to CWE-264.
NVD description
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.
EPSS · FIRST.org
3.1%probability of exploitation in the next 30 days
Higher than 87% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 31 déc. 2005
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Weaknesses (CWE)
References (14)
- http://secunia.com/advisories/18844Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0539Vendor Advisory
- http://secunia.com/advisories/18844Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0539Vendor Advisory
Similar CVEs
Other vulnerabilities of type CWE-264
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.