Fortinet FortiMail and FortiNDR Buffer Overflow Vulnerability Allowing Code Execution

A classic buffer overflow vulnerability has been identified in Fortinet FortiMail webmail and administrative interfaces, specifically in versions 6.4.0 through 6.4.4 and prior to 6.2.6. Additionally, Fortinet FortiNDR administrative interface versions 7.2.0 and prior to 7.1.0 are affected. This vulnerability allows an authenticated attacker with regular webmail access to exploit the buffer overflow by sending specially crafted HTTP requests, potentially leading to the execution of unauthorized code or commands.

Impact

Exploitation of this vulnerability can result in a buffer overflow, allowing for the execution of unauthorized code or commands on the affected system.