Websense 'Via' HTTP Header Web Filtering Security Bypass Vulnerability

Bugtraq ID:	40465
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 31 2010 12:00AM
Updated:	Aug 18 2010 09:34PM
Credit:	mrhinkydink
Vulnerable:	Websense Websense Enterprise 6.3.3 Websense Websense Enterprise 6.3.1 Websense Websense Enterprise 6.3
Not Vulnerable:

Websense 'Via' HTTP Header Web Filtering Security Bypass Vulnerability

Websense is prone to a security-bypass vulnerability because it fails to properly enforce filtering rules.

A successful attack will allow an attacker to bypass content-filtering and access forbidden websites.

This issue affects the following applications:

Websense Web Filter 7
Websense Web Security 7
Websense Enterprise 6

Websense 'Via' HTTP Header Web Filtering Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

Websense 'Via' HTTP Header Web Filtering Security Bypass Vulnerability

Solution:
The vendor released updates. Please see the references for more information.

Websense 'Via' HTTP Header Web Filtering Security Bypass Vulnerability

References:

• Re: Websense Enterprise 6.3.3 Policy Bypass (mrhinkydink)
  
• Re: Websense Enterprise 6.3.3 Policy Bypass (mrhinkydink)
  
• Web Security Vulnerability: Microsoft ISA Server Integrations (Websense)
  
• Websense Enterprise 6.3.3 Policy Bypass (mrhinkydink )
  
• Websense Homepage (Websense)
  
• Websense/ISA "Via:" Bypass Redux (mrhinkydink)