CVE-2001-1465

SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements...

EUVD-2002-1512

Malware in sbrugna...

EUVD-2002-1514

Malware in sbrugna...

EUVD-2002-2100

Malware in sbrugna...

EUVD-2002-0698

Malware in sbrugna...

EUVD-2000-0123

Malware in sbrugna...

EUVD-2002-0697

Malware in sbrugna...

EUVD-2002-0701

Malware in sbrugna...

EUVD-2002-1513

Malware in sbrugna...

EUVD-2002-0700

Malware in sbrugna...

EUVD-2001-1445

Malware in sbrugna...

SurfControl SuperScout WebFilter for windows 2000 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5857/info SurfControl SuperScout WebFilter Reports Server is prone to a vulnerability which may allow remote attackers to disclose the contents of arbitrary files. The Reports Server does not sufficiently filter...

SurfControl SuperScout WebFilter for windows 2000 SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5859/info SurfControl SuperScout WebFilter Reports Server is prone to SQL injection attacks. This issue is due to insufficient input validation on the part of some of the reports files, which are implemented as .dlls. As ...

SurfControl SuperScout Email Filter 3.5 MsgError.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5928/info SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities. The web-based admin interface is prone to cross-site scripting attacks. It is possible ...

SurfControl SuperScout Email Filter 3.5 User Credential Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5929/info SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities. One of the files userlist.asp that comes with the web interface contains a listing of...

Default configuration

The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then...

sakeru.txt

!/usr/bin/perl sakeru.pl v0.1 URL Filtering Bypass proof of concept By sinhack research labs first version Dec 23 2002 last update Jun 06 2004 Usage: 1 perl sakeru.pl 2 Configure your browser's proxy at localhost:5050 3 Have fun. Known bugs: - This proxy is not multitask, so your browser will...

CVE-2002-2121

CVE-2002-2121 affects SurfControl SuperScout Email filter for SMTP 3.5.1. The vulnerability allows a remote attacker to cause a denial-of-service crash by sending excessively long SMTP commands (HELO or RCPT TO), likely due to a buffer overflow. Exploit details and a concrete remediation are not ...

CVE-2002-2121

SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service crash via a long SMTP 1 HELO or 2 RCPT TO command, possibly due to a buffer overflow...

CVE-2001-1465

SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements...