CVE-2007-2734 Information

Description

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request which might allow remote attackers to evade detection of HTTP traffic.

Reference

http://osvdb.org/35968 http://secunia.com/advisories/25302 http://securityreason.com/securityalert/2712 http://www.3com.com/securityalert/alerts/3COM-07-001.html http://www.gamasec.net/english/gs07-01.html http://www.kb.cert.org/vuls/id/739224 http://www.securityfocus.com/archive/1/468633/100/0/threaded http://www.vupen.com/english/advisories/2007/1817