Re: 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy
From: jyoung01@xxxxxxxxxxxxxxxx
Date: 5 Aug 2008 21:09:35 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

I've been testing this and it appears that *any* HTTP 1.0 request will bypass 
the 8e6 filter (if there is not an IP in the library).
I've been testing this by using scapy to generate the HTTP GET request. 1.0 
succeeds and 1.1 fails.

Prev by Date: MyClan Sql Injection
Next by Date: Interesting things at sec-consult.com, DNS-whitepaper available tomorrow
Previous by thread: 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy
Next by thread: Plogger <= 3.0 SQL Injection
Index(es):
- Date
- Thread