Description
Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization.
References
- ADV-2007-4210 vdb-entry
- 1019094 vdb-entry
- http://mrhinkydink.blogspot.com/2007/12/websense-policy-filtering-bypass.html
- 28026 third-party-advisory
- 20071212 Fwd: Websense 6.3.1 Filtering Bypass mailing-list
- http://www.websense.com/SupportPortal/SupportKbs/976.aspx
- websense-useragent-security-bypass(39023) vdb-entry
- 20071212 Fwd: Websense 6.3.1 Filtering Bypass mailing-list
- 20071213 RE: [Full-disclosure] Fwd: Websense 6.3.1 Filtering Bypass mailing-list