8E6 R3000 Internet Filter URI Security Bypass Vulnerability

Bugtraq ID:	27309
Class:	Design Error
CVE:	CVE-2008-0372
Remote:	Yes
Local:	No
Published:	Jan 16 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	nnposter discovered this issue.
Vulnerable:	8E6 Technologies R3000 Internet Filter 2.0.5 .33 (firmware)
Not Vulnerable:

8E6 R3000 Internet Filter URI Security Bypass Vulnerability

8e6 R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters.

Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrary website. Successful exploits allow attackers to view sites that the device is meant to block access to. This could aid in further attacks.

R3000 Internet Filter 2.0.05.33 is vulnerable; other versions may also be affected.

8E6 R3000 Internet Filter URI Security Bypass Vulnerability

Attackers may exploit this issue through a browser.

The following examples of requests are available:

packet 1: GE
packet 2: T / HTTP/1.0\r\n




packet 1: GET / HTTP/1.0
X-SomeHeader: ...
....

packet 2: X-SomeOtherHeader: ....
Host: www.example.com
...

8E6 R3000 Internet Filter URI Security Bypass Vulnerability

Solution:
The vendor states that this issue has been addressed in pending release of version 2.0.11. Please contact the vendor for information on obtaining and installing the new version.

8E6 R3000 Internet Filter URI Security Bypass Vulnerability

References:

• 8e6 R3000 Homepage (8e6 Technologies)
  
• 8e6 Technologies R3000 Internet Filter Bypass by Request Split ([email protected])
  
• Re: 8e6 Technologies R3000 Internet Filter Bypass by Request Split ([email protected])