8e6 Technologies R3000 Internet Filter Bypass with Host Decoy

2008.08.06
Credit: nnposter
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

8e6 Technologies R3000 Internet Filter Bypass with Host Decoy Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter contains a vulnerability in that it can mistake a properly formed custom header for the Host header. This can be exploited for bypassing the filter by providing an allowed site in the custom header. Examples: GET / HTTP/1.0 X-DecoyHost: www.allowed.org Host: www.blocked.org GET / HTTP/1.0 X-Decoy: Host: www.allowed.org Host: www.blocked.org This weakness cannot be leveraged for circumventing blocks based on IP addresses (as opposed to DNS names). The vulnerability has been identified in version 2.0.12.10. However, other versions may be also affected. Solution: None Found by: nnposter

References:

http://seclists.org/bugtraq/2008/Aug/0034.html


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2022, cxsecurity.com

 

Back to Top