KF Web Server /%00 bug in WebAdmin?

Di you run this against the Internal interface or External?  Do you have Web Filtering enabled and in what mode?  Is Webserver Protection enabled?

Cheers - Bob

Di you run this against the Internal interface or External?  Do you have Web Filtering enabled and in what mode?  Is Webserver Protection enabled?

Cheers - Bob

This was ran against the internal interface.  I do have Web Filtering enabled and it's set for Transparent Mode.  Webserver Protection isn't enabled.

There's nothing that exploit could possibly do since the UTM uses Apache, not KeyFocus.  In any case, all of the pieces of the UTM are stripped down and hardened to minimize exposure.  You'd have to get in as root at the command line to "see" anything inside of it.

Cheers - Bob

Thanks for the info.  I was just curious since I couldn't find anything about it when doing a Google Search.