[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 02 Oct 2008 15:56:59 -0400
From: Tom Kelly <tom.kelly@...ecoat.com>
To: bugtraq@...urityfocus.com
Subject: Re: Blue Coat xss
After getting more details from the original poster,
Blue Coat Systems has issued an advisory for this issue:
http://www.bluecoat.com/support/securityadvisories/icap_patience
Tom Kelly
tom.kelly@...ecoat.com
jplopezy@...il.com wrote:
>
> There is a security issue in the blue coat.
>
> The problem lies in the "Web Filter", which lets you execute an XSS.
>
> This only affects the Internet Explorer browser. "
>
>
>
> as a result, could jump the antivirus scan or make spoofing.
>
>
>
> POC
>
>
>
> http://www.example.com/file.exe?<script>(1)</script>
>
>
>
> Juan Pablo Lopez Yacubian
>
Powered by blists - more mailing lists