Bugtraq mailing list archives
Re: Bybass HTTP ( extension files ) in ISA 2004
From: "Thor (Hammer of God)" <thor () hammerofgod com>
Date: Sat, 15 Jul 2006 12:54:51 -0700
I cannot reproduce this on either ISA2004 or ISA2006. Configuring the HTTP filter to block file extensions functions as expected with or without the "#". You've probably misconfigured your firewall, or have some other issue. Can you please provide details on your configuration? T --- New Blackhat Vegas 2006 Training Offered! ISA Ninjitsu: Designing, Building, and Maintaining Enterprise Firewall and DMZ Topologies with Microsoft ISA Server 2004 http://www.blackhat.com/html/bh-usa-06/train-bh-us-06-tm-isa.html On 7/15/06 7:47 AM, "medozero () yahoo com" <medozero () yahoo com> spoketh to all:
hi ppl i just discover a bug in Microsoft Internet Security and Acceleration (ISA) Server which make you able to Bybass HTTP ( extension files ) just add # to the end of the file extension ex: www.site.com/file.zip# that will make you bybass the filter rule if the admin prevent you from downlaoding the extension zip Copyright MedoZero 2006
Current thread:
- Bybass HTTP ( extension files ) in ISA 2004 medozero (Jul 15)
- Re: Bybass HTTP ( extension files ) in ISA 2004 Thor (Hammer of God) (Jul 17)
- <Possible follow-ups>
- RE: Bybass HTTP ( extension files ) in ISA 2004 Edward Tripovich (Jul 17)
- Re: Bybass HTTP ( extension files ) in ISA 2004 medozero (Jul 18)
- Re: Bybass HTTP ( extension files ) in ISA 2004 Thor (Hammer of God) (Jul 19)
- Re: Bybass HTTP ( extension files ) in ISA 2004 medozero (Jul 18)