CVE-2016-6909: Buffer Overflow
First published: Wed Aug 24 2016(Updated: )
Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FortiOS | >=4.1.0<4.1.11 | |
| FortiOS | >=4.2.0<4.2.13 | |
| FortiOS | >=4.3.0<4.3.9 | |
| Fortinet FortiSwitch | <=3.4.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://fortiguard.com/advisory/FG-IR-16-023
- http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html
- http://www.securityfocus.com/bid/92523
- http://www.securitytracker.com/id/1036643
- https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html
- https://www.exploit-db.com/exploits/40276/
Frequently Asked Questions
What is the severity of CVE-2016-6909?
CVE-2016-6909 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2016-6909?
To fix CVE-2016-6909, upgrade FortiOS to version 4.1.11, 4.2.13, or 4.3.9 or higher, and FortiSwitch to version 3.4.3 or higher.
What systems are affected by CVE-2016-6909?
CVE-2016-6909 affects Fortinet FortiOS versions prior to 4.1.11, 4.2.13, and 4.3.9, as well as FortiSwitch versions up to 3.4.2.
What kind of attack does CVE-2016-6909 enable?
CVE-2016-6909 allows remote attackers to execute arbitrary code through a crafted HTTP request.
Who is responsible for addressing CVE-2016-6909?
Fortinet is responsible for releasing patches and updates to address the vulnerability CVE-2016-6909.
- agent/references
- agent/type
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/fortinet
- canonical/fortios
- version/fortios/4.1.0
- version/fortios/4.2.0
- version/fortios/4.3.0
- canonical/fortinet fortiswitch
- version/fortinet fortiswitch/3.4.2