Description
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
References
- VU#739224 third-party-advisory
- 1018068 vdb-entry
- http://www.gamasec.net/english/gs07-01.html
- 20070515 GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability mailing-list