Description
Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters.
References
- 22853 vdb-entry
- http://www.bluecoat.com/support/knowledge/advisory_connect_denial_ignore.html
- 18622 third-party-advisory
- 1015644 vdb-entry
- ADV-2006-0401 vdb-entry
- http://www.secumind.net/content/french/modules/news/article.php?storyid=8
- proxysg-connect-bypass-security(24446) vdb-entry