BugTraq
RE: Bybass HTTP ( extension files ) in ISA 2004 Jul 17 2006 05:33PM
Edward Tripovich (edward tripovich hotmail com)
Tested this on ISA 2004. I cannot reproduce this. The ISA server blocks a
given extension, with or without the # at the end of the file extension.

Special config maybe?

Edward

medozero (at) yahoo (dot) com [email concealed] schreef:
>hi ppl i just discover a bug in Microsoft Internet Security and
>Acceleration (ISA) Server which make you able to Bybass HTTP ( extension
>files ) just add # to the end of the file extension
>ex: www.site.com/file.zip#
>that will make you bybass the filter rule if the admin prevent you from
>downlaoding the extension zip
>Copyright MedoZero 2006
>
>

_________________________________________________________________
Bellen met Messenger? Download nu Windows Live Messenger beta!
http://imagine-msn.com/messenger/launch80/default.aspx?locale=nl-nl

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus