|
Bypass surfControl URL Blocking Reported Feburary 4, 2000 by Mike C
surfControl Scout is a package designed to block access to specified URLs. However, by appending a period to the end of a URL a blocked URL may still be accessed, thereby bypassing the rules defined in the surfScout application. DEMONSTRATION If the URL http://www.some-blocked-site.com were blocked by surfScout rules then the site could be accessed be entering http://www.some-blocked-site.com. --- notice the period on the end of the URL.VENDOR RESPONSEThe vendor has released a patch that upgrades 2.1.6.x versions to 2.6.1.7, as well as a complete version 2.6.1.7 package for download. Discovered by Mike C |
22 comments
Hide comments
