VULHUB ™

A problem with SurfinGate could make it possible for an attacker to circumvent file filters that are set in place. SurfinGate uses the file extension to determine if a file is of a type that is blacklisted by the software. It has been reported that an attacker may bypass SurfinGate file filtering rules using a file extension that is not recognized by the filtering software. It should be noted that an end user would still have interactively to open or execute the malicious file. This may be suspicious if there is no handler on the local system for the unknown file extension. SurfinGate 7.0 is reported to also use the MIME type to detect file types. This may detect some malicious files with unknown file extensions.

A problem with SurfinGate could make it possible for an attacker to circumvent file filters that are set in place. SurfinGate uses the file extension to determine if a file is of a type that is blacklisted by the software. It has been reported that an attacker may bypass SurfinGate file filtering rules using a file extension that is not recognized by the filtering software. It should be noted that an end user would still have interactively to open or execute the malicious file. This may be suspicious if there is no handler on the local system for the unknown file extension. SurfinGate 7.0 is reported to also use the MIME type to detect file types. This may detect some malicious files with unknown file extensions.