Global Spy Software Cyber Web Filter IP Filter Bypass Vulnerability

Bugtraq ID:	11562
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 29 2004 12:00AM
Updated:	Oct 29 2004 12:00AM
Credit:	The individual responsible for the discovery of this issue is currently unknown; GSSIT - Global Security Solution IT disclosed this issue.
Vulnerable:	Global Spy Software Cyber Web Filter 2
Not Vulnerable:

Global Spy Software Cyber Web Filter IP Filter Bypass Vulnerability

Global Spy Software Cyber Web Filter is affected by an IP filter bypass vulnerability. This issue is due to a failure of the application to properly handle exceptional HTTP requests.

An attacker may leverage this issue to bypass filters based on IP addresses, allowing an attacker to visit restricted Web sites.

Global Spy Software Cyber Web Filter IP Filter Bypass Vulnerability

No exploit is required to leverage this issue. The following proof of concepts have been provided:

To access the hypothetical IP address 100.100.100.100, the following requests would be used:

http://100.0100.100.100
http://00000144.00000144.00000144.00000144

Global Spy Software Cyber Web Filter IP Filter Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Global Spy Software Cyber Web Filter IP Filter Bypass Vulnerability

References:

• Cyber Web Filter 2 Home Page (Global Spy Software)