Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: squidguard vulnerability

squidguard vulnerability

From: Petko Popadiyski <petko_at_freebsd-bg.org>
Date: Fri, 19 Mar 2004 11:51:55 +0200

squidGuard is a fast redirector using database stored blacklists.

I found that squidguard is prone to the bug found in squid about the
NULL URL character unauthorized access (
http://www.securityfocus.com/bid/9778).
The vulnerability presents itself when a URI that is designed to access
a specific location with a supplied username, contains '%00'
characters. This sequence may be placed as part of the username value
prior to the @ symbol in the malicious URI.
proof of concept :
http://foo%00@www.example.com/

-- 
Best wishes,
Petko Popadiyski
ICQ: 59468934
Received on Mar 22 2004
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos