The Latest SonicWall News
Product and Solution Information, Press Releases, Announcements
| SonicWALL Internet Threat Prevention Keeps Vulnerability Out of Customers' Networks | |
| Posted: Tue Aug 11, 2009 11:06:00 AM | |
|
SonicWALL, Inc. , a leading secure network infrastructure company, has deployed protection against SSL Certificate Null Byte Poisoning vulnerability (CVE-2009-2408). Users of the company's Unified Threat Management Firewall technology, which protects against viruses, Trojans, worms and other threats and vulnerabilities, automatically receive updated signatures designed to repel security threats. This vulnerability allows attackers to perform "man-in-the-middle" session hijacking various browser and non-browser based SSL implementations. Once an attacker successfully obtains a specially crafted null byte stuffed certificate designed to imitate the origin content server, privacy of the data can be compromised since there will be no distinguishable notification to the user that the secure connection has been intercepted by an unknown 3rd party. In addition, SSL sessions compromised as a result of the above mentioned vulnerability, can be used to install unwanted trojans and malware on the victim's computer. The vulnerability was first publicly disclosed during BlackHat security conference briefings in Las Vegas on July 29-30, 2009. On July 31, 2009, users of SonicWALL's Unified Threat Management technology received updated signatures designed to protect against this threat. SonicWALL has issued the following IPS signature IPS SID: 1266 EXPLOIT - SSL Server Certificate Null Byte Poisoning. SonicWALL has developed unique technologies to deliver zero day gateway anti-virus, anti-spyware and intrusion prevention signatures to its subscribers on a continual basis, allowing them to defend against new and existing Internet attacks and exploits such as phishing, viruses, DHA or DoS attacks and more. Customers with a current subscription to SonicWALL's gateway threat prevention services are not affected by this vulnerability. |