Details of VAR-200506-0065

ID

VAR-200506-0065

CVE

CVE-2005-1837

TITLE

FortiOS Firewall privilege escalation vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200506-001

DESCRIPTION

Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges. Fortinet Firewall is prone to a remote security vulnerability. A local user with console access could exploit this vulnerability to gain privileges

Trust: 1.26

sources: NVD: CVE-2005-1837 // BID: 89900 // VULHUB: VHN-13046

AFFECTED PRODUCTS

vendor:	fortinet	model:	firewall	scope:	eq	version:	*	Trust: 1.0
vendor:	fortinet	model:	firewall	scope:	-	version:	-	Trust: 0.6
vendor:	fortinet	model:	firewall	scope:	eq	version:	0	Trust: 0.3

sources: BID: 89900 // CNNVD: CNNVD-200506-001 // NVD: CVE-2005-1837

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2005-1837
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200506-001
value:	HIGH
Trust: 0.6
VULHUB:	VHN-13046
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2005-1837
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-13046
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-13046 // CNNVD: CNNVD-200506-001 // NVD: CVE-2005-1837

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2005-1837

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200506-001

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-200506-001

EXTERNAL IDS

db:	NVD	id:	CVE-2005-1837	Trust: 2.0
db:	CNNVD	id:	CNNVD-200506-001	Trust: 0.7
db:	BUGTRAQ	id:	20050601 BACKDOOR IN =?ISO-8859-1?Q?FORTINET=B4S_FIREWALL_FORTIGATE?=	Trust: 0.6
db:	BID	id:	89900	Trust: 0.4
db:	VULHUB	id:	VHN-13046	Trust: 0.1

sources: VULHUB: VHN-13046 // BID: 89900 // CNNVD: CNNVD-200506-001 // NVD: CVE-2005-1837

REFERENCES

url:	http://marc.info/?l=bugtraq&m=111773657526375&w=2	Trust: 1.0
url:	http://marc.theaimsgroup.com/?l=bugtraq&m=111773657526375&w=2	Trust: 0.9
url:	http://marc.info/?l=bugtraq&m=111773657526375&w=2	Trust: 0.1

sources: VULHUB: VHN-13046 // BID: 89900 // CNNVD: CNNVD-200506-001 // NVD: CVE-2005-1837

CREDITS

Unknown

Trust: 0.3

sources: BID: 89900

SOURCES

db:	VULHUB	id:	VHN-13046
db:	BID	id:	89900
db:	CNNVD	id:	CNNVD-200506-001
db:	NVD	id:	CVE-2005-1837

LAST UPDATE DATE

2024-08-14T15:36:04.778000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-13046	date:	2016-10-18T00:00:00
db:	BID	id:	89900	date:	2005-06-01T00:00:00
db:	CNNVD	id:	CNNVD-200506-001	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2005-1837	date:	2016-10-18T03:22:56.320

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-13046	date:	2005-06-01T00:00:00
db:	BID	id:	89900	date:	2005-06-01T00:00:00
db:	CNNVD	id:	CNNVD-200506-001	date:	2005-06-01T00:00:00
db:	NVD	id:	CVE-2005-1837	date:	2005-06-01T04:00:00