Description
The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and has asked the researcher for more information, without a response as of 20060103
References
- 20051223 RE: Webwasher CSM Appliance Script Security Restriction Bypass mailing-list
- webwasher-security-bypass(23884) vdb-entry
- 20051222 Webwasher CSM Appliance Script Security Restriction Bypass mailing-list
- 16047 vdb-entry
- 20060103 RE: Webwasher CSM Appliance Script Security Restriction Bypass mailing-list
- 293 third-party-advisory