CVE

Id
3830  
CVE No.
CVE-2001-1026  
Status
Candidate  
Description
Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address.  
Phase
Modified (20050706)  
Votes
ACCEPT(2) Cole, Frech | NOOP(4) Armstrong, Christey, Foat, Wall | REVIEWING(1) Green  
Comments
Christey> Consider adding BID:2996 | Christey> Consider adding BID:2998 | Christey> Consider adding BID:2999 | Christey> Consider adding BID:3000 | Christey> fix typo: "leading a leading"  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
17456 3830 CVE-2001-1026 BUGTRAQ:20010709 Various problems in Ternd Micro AppletTrap URL filtering  View
17457 3830 CVE-2001-1026 URL:http://archives.neohapsis.com/archives/bugtraq/2001-07/0129.html  View
17458 3830 CVE-2001-1026 BID:2996  View
17459 3830 CVE-2001-1026 URL:http://www.securityfocus.com/bid/2996  View
17460 3830 CVE-2001-1026 BID:2998  View
17461 3830 CVE-2001-1026 URL:http://www.securityfocus.com/bid/2998  View
17462 3830 CVE-2001-1026 BID:3000  View
17463 3830 CVE-2001-1026 URL:http://www.securityfocus.com/bid/3000  View
17464 3830 CVE-2001-1026 XF:applettrap-bypass-ip-restrictions(6818)  View
17465 3830 CVE-2001-1026 URL:http://xforce.iss.net/static/6818.php  View
17466 3830 CVE-2001-1026 XF:content-slash-bypass-filter(6816)  View
17467 3830 CVE-2001-1026 URL:http://xforce.iss.net/static/6816.php  View
17468 3830 CVE-2001-1026 XF:applettrap-unicode-bypass-filter(6817)  View
17469 3830 CVE-2001-1026 URL:http://xforce.iss.net/static/6817.php  View
17470 3830 CVE-2001-1026 XF:applettrap-zero-bypass-restrictions(6819)  View

Related JVN