Blue Coat ProxySG Content Filtering Security Bypass Vulnerability

Bugtraq ID:	44156
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 01 2010 12:00AM
Updated:	Oct 01 2010 12:00AM
Credit:	Blue Coat
Vulnerable:	Blue Coat Systems ProxySG 6.1 Blue Coat Systems ProxySG 5.5 Blue Coat Systems ProxySG 5.4 Blue Coat Systems ProxySG 5.3 Blue Coat Systems ProxySG 4.3
Not Vulnerable:

Blue Coat ProxySG Content Filtering Security Bypass Vulnerability

Blue Coat ProxySG is prone to a security-bypass vulnerability because it fails to properly enforce filtering rules.

A successful attack will allow an attacker to bypass intended security restrictions and transmit active content to the users of the vulnerable application. The content would execute in a web browser, potentially allowing an attacker to carry out further attacks.

All versions of ProxySG are affected.

Blue Coat ProxySG Content Filtering Security Bypass Vulnerability

The attacker needs to entice a user to visit a malicious website to exploit this issue.

Blue Coat ProxySG Content Filtering Security Bypass Vulnerability

References:

• Fix is available in patch release 5.4.5.1 (Blue Coat)
  
• JavaScript detection improvements in active content transformation (Blue Coat)
  
• Vendor Homepage (Blue Coat)