Description
DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename.
References
- 12191 third-party-advisory
- 10823 vdb-entry
- dansguardian-filename-bypass-filtering(16836) vdb-entry
- 8270 vdb-entry
- http://dansguardian.org/?page=history
- 20040729 DansGuardian Hex Encoding URL Banned Extension Filter Bypass mailing-list
- 1010817 vdb-entry