CVE-2012-2632

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session.

🔗 References (6)

• vultures@jpcerthttp://jvn.jp/en/jp/JVN24646833/index.html
• vultures@jpcerthttp://jvndb.jvn.jp/jvndb/JVNDB-2012-000059
• vultures@jpcerthttp://www.seil.jp/support/security/a01232.html
• af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/en/jp/JVN24646833/index.html
• af854a3a-2127-422b-91ae-364da2661108http://jvndb.jvn.jp/jvndb/JVNDB-2012-000059
• af854a3a-2127-422b-91ae-364da2661108http://www.seil.jp/support/security/a01232.html