BID:5291

DansGuardian Hex Encoding URL Content Filter Bypass Vulnerability

Info

DansGuardian Hex Encoding URL Content Filter Bypass Vulnerability

Bugtraq ID:	5291
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 23 2002 12:00AM
Updated:	Jul 23 2002 12:00AM
Credit:	Published in the DansGuardian changelog.
Vulnerable:	Daniel Barron DansGuardian 2 2.2.10 Daniel Barron DansGuardian 2 2.2.9 -1 Daniel Barron DansGuardian 2 2.2.9 Daniel Barron DansGuardian 2 2.2.8 Daniel Barron DansGuardian 2 2.2.7 -1 Daniel Barron DansGuardian 2 2.2.7 Daniel Barron DansGuardian 2 2.2.6 Daniel Barron DansGuardian 2 2.2.5 Daniel Barron DansGuardian 2 2.2.4

Not Vulnerable:	Daniel Barron DansGuardian 2 2.4.5 -1

Discussion

DansGuardian Hex Encoding URL Content Filter Bypass Vulnerability

DansGuardian is a web content filter based on the Squid HTTP proxy server. It is available for various Unix based operating systems, including Linux.

DansGuardian may allow malicious users to bypass some filter rules when processing URLs which contain hex encoded characters. Under some installations, this may violate security policy, or allow users to inadvertantly access malicious web content.

Exploit / POC

DansGuardian Hex Encoding URL Content Filter Bypass Vulnerability

No exploit is required.

Solution / Fix

DansGuardian Hex Encoding URL Content Filter Bypass Vulnerability

Solution:
An updated version is available:

Daniel Barron DansGuardian 2 2.2.10