WatchGuard Firebox SMTP Proxy Attachment Bypassing Vulnerability
BID:2855
Info
WatchGuard Firebox SMTP Proxy Attachment Bypassing Vulnerability
| Bugtraq ID: | 2855 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 08 2001 12:00AM |
| Updated: | Jun 08 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq by Dante Mercurio <[email protected]> on June 8, 2001, and was originally discovered by Thomas Boll. |
| Vulnerable: |
WatchGuard Firebox 4500 4.6 WatchGuard Firebox 4500 4.5 WatchGuard Firebox 2500 4.6 WatchGuard Firebox 2500 4.5 |
| Not Vulnerable: | |
Discussion
WatchGuard Firebox SMTP Proxy Attachment Bypassing Vulnerability
Firebox is a hardware based firewall implementation distributed by WatchGuard. Firebox is distributed in various sizes ranging from personal sized to enterprise level firewalling, and offers advanced features such as crypto-vpn.
A problem with the firewall makes it possible to bypass SMTP content checking. The problem is due to the checking of attachments when encoded with base64. When the boundry name in the mail is appended with two dashes, the firewall passes the mail attachments without further checking.
This makes it possible for a remote user to send attachments such functional vbscripts in email, and bypass filtering of the firewall.
Firebox is a hardware based firewall implementation distributed by WatchGuard. Firebox is distributed in various sizes ranging from personal sized to enterprise level firewalling, and offers advanced features such as crypto-vpn.
A problem with the firewall makes it possible to bypass SMTP content checking. The problem is due to the checking of attachments when encoded with base64. When the boundry name in the mail is appended with two dashes, the firewall passes the mail attachments without further checking.
This makes it possible for a remote user to send attachments such functional vbscripts in email, and bypass filtering of the firewall.
Exploit / POC
WatchGuard Firebox SMTP Proxy Attachment Bypassing Vulnerability
See discussion.
See discussion.
Solution / Fix
WatchGuard Firebox SMTP Proxy Attachment Bypassing Vulnerability
Solution:
Upgrades available:
WatchGuard Firebox 2500 4.5
WatchGuard Firebox 4500 4.5
WatchGuard Firebox 4500 4.6
WatchGuard Firebox 2500 4.6
Solution:
Upgrades available:
WatchGuard Firebox 2500 4.5
WatchGuard Firebox 4500 4.5
WatchGuard Firebox 4500 4.6
WatchGuard Firebox 2500 4.6
References
WatchGuard Firebox SMTP Proxy Attachment Bypassing Vulnerability
References:
References: