• info
• discussion
• exploit
• solution
• references

Multiple Fortinet Single Sign On Products CVE-2015-2281 Stack Buffer Overflow Vulnerability

Multiple Fortinet products are prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

A remote attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed attempts will likely cause a denial-of-service condition. This may also lead to a full network compromise.