NVD Vulnerability Detail

CVE-2016-6909

Summary	Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER.
Publication Date	Aug. 25, 2016, 1:30 a.m.
Registration Date	Jan. 26, 2021, 2:16 p.m.
Last Update	Nov. 21, 2024, 11:57 a.m.

Affected software configurations

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:fortinet:fortiswitch::::::::			3.4.2

Related information, measures and tools

No	URL	タグ
1	http://fortiguard.com/advisory/FG-IR-16-023	Vendor Advisory
2	http://fortiguard.com/advisory/FG-IR-16-023	Vendor Advisory
3	http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html	Exploit Third Party Advisory VDB Entry
4	http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html	Exploit Third Party Advisory VDB Entry
5	http://www.securityfocus.com/bid/92523	Third Party Advisory VDB Entry
6	http://www.securityfocus.com/bid/92523	Third Party Advisory VDB Entry
7	http://www.securitytracker.com/id/1036643	Third Party Advisory VDB Entry
8	http://www.securitytracker.com/id/1036643	Third Party Advisory VDB Entry
9	https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html	Third Party Advisory
10	https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html	Third Party Advisory
11	https://www.exploit-db.com/exploits/40276/	Exploit Third Party Advisory VDB Entry
12	https://www.exploit-db.com/exploits/40276/	Exploit Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

Fortinet FortiOS および FortiSwitch の Cookie パーサにおけるバッファオーバーフローの脆弱性

Title	Fortinet FortiOS および FortiSwitch の Cookie パーサにおけるバッファオーバーフローの脆弱性
Summary	Fortinet FortiOS および FortiSwitch の Cookie パーサには、バッファオーバーフローの脆弱性が存在します。本脆弱性は、EGREGIOUSBLUNDER の脆弱性と呼ばれています。
Possible impacts	第三者により、巧妙に細工された HTTP リクエストを介して、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 17, 2016, midnight
Registration Date	Aug. 25, 2016, 10:46 a.m.
Last Update	Aug. 25, 2016, 10:46 a.m.

Affected System

フォーティネット

FortiOS 4.1.11 未満の 4.x

FortiOS 4.2.13 未満の 4.2.x

FortiOS 4.3.9 未満の 4.3.x

FortiSwitch 3.4.3 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-6909	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6909
National Vulnerability Database (NVD)
2	CVE-2016-6909	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6909

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
FortiGuard Security Advisories
1	Cookie Parser Buffer Overflow Vulnerability	http://fortiguard.com/advisory/FG-IR-16-023

Change Log

No	Changed Details	Date of change
0	[2016年08月25日] 掲載	Feb. 17, 2018, 10:37 a.m.