gurka
31-10-2004, 20:52
It has been reported that several products are vulnerable to content filtering bypass issues.
These issues could allow a web client to access disallowed content from behind an affected product. Bypassing the content filter could potentially allow malicious code to be executed on a client system thought to be protected.
Checkpoint VPN-1 and Firewall-1 and Agnitum Outpost Pro have been confirmed vulnerable to some or all of these issues. Other products are likely vulnerable.
http://www.securityfocus.com/bid/11558/discussion/
vulnerable:
Agnitum Outpost Firewall 2.1
Agnitum Outpost Firewall 2.5
ATGuard ATGuard Personal Firewall 3.2
Check Point Software FireWall-1 Next Generation FP3
Check Point Software FireWall-1 Next Generation FP2
Check Point Software FireWall-1 Next Generation FP1
Check Point Software FireWall-1 Next Generation FP0
Check Point Software VPN-1 Next Generation FP2
Check Point Software VPN-1 Next Generation FP1
Check Point Software VPN-1 Next Generation FP0
Internet Security Systems BlackICE PC Protection 3.6 cch
Internet Security Systems BlackICE PC Protection 3.6 ccg
Internet Security Systems BlackICE PC Protection 3.6 ccf
Internet Security Systems BlackICE PC Protection 3.6 cce
Internet Security Systems BlackICE PC Protection 3.6 ccd
Internet Security Systems BlackICE PC Protection 3.6 ccc
Internet Security Systems BlackICE PC Protection 3.6 ccb
Internet Security Systems BlackICE PC Protection 3.6 cca
Internet Security Systems BlackICE PC Protection 3.6 cbz
Internet Security Systems BlackICE PC Protection 3.6 cbr
Internet Security Systems BlackICE PC Protection 3.6 cbd
Internet Security Systems BlackICE PC Protection 3.6 .cno
Internet Security Systems BlackICE PC Protection 3.6 .cbz
Kerio Personal Firewall 4.0.6
Kerio Personal Firewall 4.0.7
Kerio Personal Firewall 4.0.8
Kerio Personal Firewall 4.0.9
Kerio Personal Firewall 4.0.10
Kerio Personal Firewall 4.0.16
Microsoft Windows XP Home SP2
Microsoft Windows XP Professional SP2
Tiny Firewall Pro 6.0.100
Zone Labs ZoneAlarm Pro with Web Filtering 4.5.594
http://www.securityfocus.com/bid/11558/info/
These issues could allow a web client to access disallowed content from behind an affected product. Bypassing the content filter could potentially allow malicious code to be executed on a client system thought to be protected.
Checkpoint VPN-1 and Firewall-1 and Agnitum Outpost Pro have been confirmed vulnerable to some or all of these issues. Other products are likely vulnerable.
http://www.securityfocus.com/bid/11558/discussion/
vulnerable:
Agnitum Outpost Firewall 2.1
Agnitum Outpost Firewall 2.5
ATGuard ATGuard Personal Firewall 3.2
Check Point Software FireWall-1 Next Generation FP3
Check Point Software FireWall-1 Next Generation FP2
Check Point Software FireWall-1 Next Generation FP1
Check Point Software FireWall-1 Next Generation FP0
Check Point Software VPN-1 Next Generation FP2
Check Point Software VPN-1 Next Generation FP1
Check Point Software VPN-1 Next Generation FP0
Internet Security Systems BlackICE PC Protection 3.6 cch
Internet Security Systems BlackICE PC Protection 3.6 ccg
Internet Security Systems BlackICE PC Protection 3.6 ccf
Internet Security Systems BlackICE PC Protection 3.6 cce
Internet Security Systems BlackICE PC Protection 3.6 ccd
Internet Security Systems BlackICE PC Protection 3.6 ccc
Internet Security Systems BlackICE PC Protection 3.6 ccb
Internet Security Systems BlackICE PC Protection 3.6 cca
Internet Security Systems BlackICE PC Protection 3.6 cbz
Internet Security Systems BlackICE PC Protection 3.6 cbr
Internet Security Systems BlackICE PC Protection 3.6 cbd
Internet Security Systems BlackICE PC Protection 3.6 .cno
Internet Security Systems BlackICE PC Protection 3.6 .cbz
Kerio Personal Firewall 4.0.6
Kerio Personal Firewall 4.0.7
Kerio Personal Firewall 4.0.8
Kerio Personal Firewall 4.0.9
Kerio Personal Firewall 4.0.10
Kerio Personal Firewall 4.0.16
Microsoft Windows XP Home SP2
Microsoft Windows XP Professional SP2
Tiny Firewall Pro 6.0.100
Zone Labs ZoneAlarm Pro with Web Filtering 4.5.594
http://www.securityfocus.com/bid/11558/info/