PT-2002-1109 · Surfcontrol · Surfcontrol Superscout

Publicado 2002-02-26 · Atualizado 2008-09-05 · CVE-2001-1465

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SurfControl SuperScout (affected versions not specified)

Description The issue allows local users to bypass filtering by fragmenting packets. This is possible because SurfControl SuperScout only filters packets that contain both an HTTP GET request and a Host header. By fragmenting packets so that no single packet contains both data elements, users can circumvent the filtering mechanism.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-1465

Produtos afetados

Surfcontrol Superscout

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1465 · Nota de Segurança
• http://kb.cert.org/vuls/id/139315 · Nota
• http://securitytracker.com/id?1001801 · Nota