Description
The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic.
References
- VU#739224 third-party-advisory
- 2712 third-party-advisory
- http://www.3com.com/securityalert/alerts/3COM-07-001.html
- 25302 third-party-advisory
- http://www.gamasec.net/english/gs07-01.html
- 35968 vdb-entry
- ADV-2007-1817 vdb-entry
- 20070515 GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability mailing-list