Internet Junkbuster Proxy Unauthorized Connections Vulnerability
BID:6471
Info
Internet Junkbuster Proxy Unauthorized Connections Vulnerability
| Bugtraq ID: | 6471 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 23 2002 12:00AM |
| Updated: | Dec 23 2002 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Andrew Daviel <[email protected]>. |
| Vulnerable: |
Junkbuster Internet Junkbuster 2.0.1 |
| Not Vulnerable: |
Junkbuster Internet Junkbuster 2.0.2 |
Discussion
Internet Junkbuster Proxy Unauthorized Connections Vulnerability
A vulnerability in Junkbuster may allow remote attackers to abuse the proxy to make unauthorized connections to arbitrary ports on any hosts that the proxy may access.
It is possible to exploit this issue using the CONNECT method to proxy an unauthorized connection to an arbitrary port on any host the proxy may access.
A vulnerability in Junkbuster may allow remote attackers to abuse the proxy to make unauthorized connections to arbitrary ports on any hosts that the proxy may access.
It is possible to exploit this issue using the CONNECT method to proxy an unauthorized connection to an arbitrary port on any host the proxy may access.
Exploit / POC
Internet Junkbuster Proxy Unauthorized Connections Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
Internet Junkbuster Proxy Unauthorized Connections Vulnerability
Solution:
The vendor has addressed this issue in Junkbuster 2.0.2 and users are advised to upgrade as soon as possible.
Junkbuster Internet Junkbuster 2.0.1
Solution:
The vendor has addressed this issue in Junkbuster 2.0.2 and users are advised to upgrade as soon as possible.
Junkbuster Internet Junkbuster 2.0.1
-
Junkbuster Junkbuster 2.0.2
http://internet.junkbuster.com/ijb.html
References
Internet Junkbuster Proxy Unauthorized Connections Vulnerability
References:
References:
- Junkbusters Information for VU#150227 (CERT)
- junkbuster 2.0-1 proxy relaying spam (Andrew Daviel
- Re: junkbuster 2.0-1 proxy relaying spam VU#150227 ("CERT\(R\) Coordination Center"