PT-2007-7345 · Realnetworks+1 · Realplayer+1

Mrhinkydink · Published 2007-12-21 · Updated 2018-10-15 · CVE-2007-6511

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Websense Enterprise version 6.3.1

Description The issue allows remote attackers to bypass content filtering. This can be achieved by visiting HTTP URLs with specific User-Agent headers, including (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent, resulting in a Non-HTTP categorization.

Recommendations For Websense Enterprise version 6.3.1, consider restricting access to HTTP URLs with the specified User-Agent headers as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2007-6511

Affected Products

Realplayer

Websense Enterprise

References · 10

• http://secunia.com/advisories/28026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6511 · Security Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059092.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39023 · Note
• http://mrhinkydink.blogspot.com/2007/12/websense-policy-filtering-bypass.html · Note
• http://vupen.com/english/advisories/2007/4210 · Note
• http://securitytracker.com/id?1019094 · Note
• http://securityfocus.com/archive/1/485033/100/0/threaded · Note
• http://securityfocus.com/archive/1/485032/100/0/threaded · Note
• http://websense.com/SupportPortal/SupportKbs/976.aspx · Note