2005-05-10 04:00:00
mitre
PUBLISHED
DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename.