ZoneLabs IMsecure URI Filter Bypass Vulnerability

Bugtraq ID:	11662
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 11 2004 12:00AM
Updated:	Nov 11 2004 12:00AM
Credit:	Paul Kurczaba of Kurczaba Associates disclosed this vulnerability.
Vulnerable:	Zone Labs IMsecure 1.0.2 .0 Zone Labs IMsecure 1.0.1 .0 Zone Labs IMsecure 1.0 .0.0
Not Vulnerable:	Zone Labs IMsecure 1.5 .0.39

ZoneLabs IMsecure URI Filter Bypass Vulnerability

It is reported that IMsecure is vulnerable to a filter bypass vulnerability.

This vulnerability allows remote attackers to bypass the security filter of the affected product.

Versions prior to 1.5.0.39 are reportedly affected by this vulnerability.

ZoneLabs IMsecure URI Filter Bypass Vulnerability

An exploit is not required.

ZoneLabs IMsecure URI Filter Bypass Vulnerability

Solution:
The vendor has released version 1.5.0.39 of the affected package to resolve this issue, as well as a security alert documenting the vulnerability. Please see the referenced advisory for further information on obtaining fixes.

ZoneLabs IMsecure URI Filter Bypass Vulnerability

References:

• Security Advisory: Zone Labs IMSecure URL Filtering (Zone Labs)
  
• Zone Labs Homepage (Zone Labs)
  
• Zone Labs IMsecure Active Link Filter Bypass (Kurczaba Associates advisories )