Bugtraq: Re: Blue Coat xss

[Tom Kelly <tom.kelly () bluecoat com>]

After getting more details from the original poster,
Blue Coat Systems has issued an advisory for this issue:

http://www.bluecoat.com/support/securityadvisories/icap_patience

Tom Kelly
tom.kelly () bluecoat com


jplopezy () gmail com wrote:
> There is a security issue in the blue coat.
>
> The problem lies in the "Web Filter", which lets you execute an XSS.
>
> This only affects the Internet Explorer browser. "
>
>
>
> as a result, could jump the antivirus scan or make spoofing.
>
>
>
> POC
>
>
>
> http://www.example.com/file.exe?<script>(1)</script>
>
>
>
> Juan Pablo Lopez Yacubian