WebWasher Malicious Script Filter Bypass Vulnerability

Bugtraq ID:	16047
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 22 2005 12:00AM
Updated:	Feb 14 2006 10:18PM
Credit:	Discovered by d0t v0rt3x <[email protected]>.
Vulnerable:	Webwasher Webwasher CSM Suite 5.0 Webwasher Webwasher CSM Appliance
Not Vulnerable:

WebWasher Malicious Script Filter Bypass Vulnerability

WebWasher is prone to a filter-bypass vulnerability.

Successful exploitation can allow an attacker to bypass the security filter responsible for blocking malicious scripts.

Webwasher CSM Appliance and CSM Suite are vulnerable to this issue.

UPDATE: Further testing and reports from the vendor indicate that this issue cannot be reproduced. This BID is now retired.

WebWasher Malicious Script Filter Bypass Vulnerability

An exploit is not required.

WebWasher Malicious Script Filter Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

WebWasher Malicious Script Filter Bypass Vulnerability

References:

• Webwasher Classic Product Homepage (Webwasher)
  
• RE: Webwasher CSM Appliance Script Security Restriction Bypass ("Frank Berzau" )