EUVD-2007-1221

Malware in sbrugna...

Design/Logic Flaw

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port :80...

Design/Logic Flaw

The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection...

CVE-2007-1224

CVE-2007-1224 affects Grok Developments’ NetProxy 4.03. Affected component: the proxy’s URL filtering logic. The issue allows remote attackers to bypass URL filtering by issuing a request that omits the http:// prefix and specifies the destination port as :80, effectively evading restrictions. Th...

CVE-2007-1225

The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection...

CVE-2007-1224: Undefined Security Weakness

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port :80...

CVE-2007-1225: Undefined Security Weakness

The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection...