The U.S. Computer Emergency Response Team is reporting a network evasion technique that uses full-width and half-width unicode characters to allow malware to evade detection by an IPS or firewall.
The vulnerability affects virtually every major firewall and intrusion prevention system available, including products from Cisco Systems. Given Cisco's major share of the market, at least for enterprise routers and VPN and firewall equipment—according to Gartner, Cisco was at the top of the heap with 66 percent of that market in 2006—that means most businesses will be affected.
eWeek Security


Reply With Quote