<<< Date Index >>>     <<< Thread Index >>>

8e6 Technologies R3000 Internet Filter Bypass with Host Decoy



8e6 Technologies R3000 Internet Filter Bypass with Host Decoy


Product:

8e6 Technologies R3000 Internet Filter
http://www.8e6.com/network-security/internet-filtering/internet-filtering.html


The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet 
Filter contains a vulnerability in that it can mistake a properly formed custom 
header for the Host header. This can be exploited for bypassing the filter by 
providing an allowed site in the custom header.

Examples:

  GET / HTTP/1.0
  X-DecoyHost: www.allowed.org
  Host: www.blocked.org

  GET / HTTP/1.0
  X-Decoy: Host: www.allowed.org
  Host: www.blocked.org

This weakness cannot be leveraged for circumventing blocks based on IP 
addresses (as opposed to DNS names).


The vulnerability has been identified in version 2.0.12.10. However, other 
versions may be also affected.


Solution:
None


Found by:
nnposter