PT-2007-7345 · Realnetworks+1 · Realplayer+1

Mrhinkydink · Publicado 2007-12-21 · Atualizado 2018-10-15 · CVE-2007-6511

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Websense Enterprise version 6.3.1

Description The issue allows remote attackers to bypass content filtering. This can be achieved by visiting HTTP URLs with specific User-Agent headers, including (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent, resulting in a Non-HTTP categorization.

Recommendations For Websense Enterprise version 6.3.1, consider restricting access to HTTP URLs with the specified User-Agent headers as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2007-6511

Produtos afetados

Realplayer

Websense Enterprise

Referências · 10

• http://secunia.com/advisories/28026 · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059092.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39023 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6511 · Nota de Segurança
• http://mrhinkydink.blogspot.com/2007/12/websense-policy-filtering-bypass.html · Nota
• http://vupen.com/english/advisories/2007/4210 · Nota
• http://securitytracker.com/id?1019094 · Nota
• http://securityfocus.com/archive/1/485033/100/0/threaded · Nota
• http://securityfocus.com/archive/1/485032/100/0/threaded · Nota
• http://websense.com/SupportPortal/SupportKbs/976.aspx · Nota