BugTraq
Bybass HTTP ( extension files ) in ISA 2004 Jul 15 2006 02:47PM
medozero yahoo com (1 replies)
hi ppl i just discover a bug in Microsoft Internet Security and Acceleration (ISA) Server which make you able to Bybass HTTP ( extension files ) just add # to the end of the file extension

ex: www.site.com/file.zip#

that will make you bybass the filter rule if the admin prevent you from downlaoding the extension zip

Copyright MedoZero 2006

[ reply ]
Re: Bybass HTTP ( extension files ) in ISA 2004 Jul 15 2006 07:54PM
Thor (Hammer of God) (thor hammerofgod com)


 

Privacy Statement
Copyright 2010, SecurityFocus