Description
Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address.
References
- content-slash-bypass-filter(6816) vdb-entry
- applettrap-bypass-ip-restrictions(6818) vdb-entry
- applettrap-unicode-bypass-filter(6817) vdb-entry
- 3000 vdb-entry
- 20010709 Various problems in Ternd Micro AppletTrap URL filtering mailing-list
- 2996 vdb-entry
- applettrap-zero-bypass-restrictions(6819) vdb-entry
- 2998 vdb-entry