Finjan SurfinGate IP Address To Hostname URL Filter Bypassing Vulnerability

Bugtraq ID:	5629
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 04 2002 12:00AM
Updated:	Sep 04 2002 12:00AM
Credit:	Vulnerability discovery credited to Marc Ruef <[email protected]>.
Vulnerable:	Finjan Software SurfinGate 6.0 1 Finjan Software SurfinGate 6.0
Not Vulnerable:

Finjan SurfinGate IP Address To Hostname URL Filter Bypassing Vulnerability

SurfinGate is a commercially available content filtering and application firewall package. It is distributed by Finjan, and available for the Sun Solaris and Microsoft Windows platforms.

It has been discovered that SurfinGate does not resolve host and domain names by default. Due to this flaw, a user may access a site by entering the IP address instead of the host and domain name.

Finjan SurfinGate IP Address To Hostname URL Filter Bypassing Vulnerability

No exploit is required for this vulnerability.

Finjan SurfinGate IP Address To Hostname URL Filter Bypassing Vulnerability

Solution:
The vendor has confirmed the existence of this issue, and stated that the system is not designed to function as a strong blacklist, as documented in the help file. However, the vendor has made it known that this functionality will be added in addition to resolution of this issue in a future release.

Finjan SurfinGate IP Address To Hostname URL Filter Bypassing Vulnerability

References:

• SurfinGate Product Page (Finjan Software)