CVE-2009-1262: High severity fortinet forticlient virtual private network vulnerability
Published Apr 7, 2009
·Updated
Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name.
Affected Software
1 affected component
Fortinet Forticlient=3.0.614
Event History
Apr 7, 2009
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1262?
CVE-2009-1262 has a medium severity rating due to the potential for local users to execute arbitrary code.
2
How do I fix CVE-2009-1262?
To fix CVE-2009-1262, upgrade to Fortinet FortiClient version 3.0.615 or later where the vulnerability is resolved.
3
Who is affected by CVE-2009-1262?
CVE-2009-1262 affects local users of Fortinet FortiClient version 3.0.614 and possibly earlier versions.
4
What kind of attack can be executed due to CVE-2009-1262?
CVE-2009-1262 allows local users to execute arbitrary code via format string specifiers in the VPN connection name.
5
Is CVE-2009-1262 a remote or local vulnerability?
CVE-2009-1262 is a local vulnerability, meaning it requires local access to the affected system to exploit.