Description
The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode.
References
- http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html
- 20720 third-party-advisory
- 18570 vdb-entry
- 26736 vdb-entry
- 20060707 FortiGate issue - "EPSV" not "ESPV" mailing-list
- fortinet-ftp-espv-security-bypass(27532) vdb-entry
- ADV-2006-2467 vdb-entry