[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Bybass HTTP ( extension files ) in ISA 2004
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Bybass HTTP ( extension files ) in ISA 2004
- From: medozero@xxxxxxxxx
- Date: 15 Jul 2006 14:47:18 -0000
hi ppl i just discover a bug in Microsoft Internet Security and Acceleration
(ISA) Server which make you able to Bybass HTTP ( extension files ) just add #
to the end of the file extension
ex: www.site.com/file.zip#
that will make you bybass the filter rule if the admin prevent you from
downlaoding the extension zip
Copyright MedoZero 2006