AOH :: HP Unsorted Nums :: BX1479.HTM

8e6 Technologies R3000 Internet Filter Bypass by Request Split



8e6 Technologies R3000 Internet Filter Bypass by Request Split
8e6 Technologies R3000 Internet Filter Bypass by Request Split



8e6 Technologies R3000 Internet Filter Bypass by Request Split=0D
=0D
=0D
Product:=0D
=0D
8e6 Technologies R3000 Internet Filter=0D
http://www.8e6.com/network-security/internet-filtering/internet-filtering.html=0D 
=0D
=0D
The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by simply splitting the HTTP request line (which contains the URI) into multiple packets.=0D
=0D
Example:=0D
=0D
packet 1: GE=0D
packet 2: T / HTTP/1.0\r\n=0D
=0D
This weakness is present regardless whether the site block is based on the DNS name or the IP address. For circumventing blocks based solely on the DNS name it is sufficient to arrange the HTTP request so that the request line and the Host header end up in separate packets.=0D
=0D
Example:=0D
=0D
packet 1: GET / HTTP/1.0=0D
          X-SomeHeader: ...=0D
          ....=0D
          =0D
packet 2: X-SomeOtherHeader: ....=0D
Host: www.blocked.com=0D 
          ...=0D
=0D
=0D
The vulnerability has been identified in version 2.0.05.33. However, other versions may be also affected.=0D
=0D
=0D
Solution:=0D
Use a filtering solution that performs an HTTP request reassembly.=0D
=0D
=0D
Found by:=0D
nnposter=0D

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.