New software application to protect computers against SSL Certificate Null Byte Poisoning vulnerability
Our firm~{The firm}~SonicWall~Sonic}~SoniWall~{The firm}~SonicWall~Sonic}., a key provider of infrastructure security, has introduced a tool to beat the threat poised by this vulnerability through its new application software. Users of the SonicWall Internet security’s Unified Threat Management Firewall technology, which protects against viruses, Trojans, worms and other threats and vulnerabilities, automatically receive updated signatures designed to repel security threats.
This vulnerability allows attackers to perform “man-in-the-middle” session hijacking various browser and non-browser based SSL implementations. It will be easier for attackers to enter your system because your computer will not be able to recognize if your Internet connection has been tapped by a third third party using null byte stuffed cerfitificate which resembles the origin content server.
In addition, SSL sessions compromised as a result of the above mentioned vulnerability, can be used to install unwanted trojans and malware on the victim’s computer.
The problem was first brouched during the July 29-30, 2009 BalckHat security conference session in Las Vegas. On July 31, 2009, users of SonicWALL internet security’s Unified Threat Management technology received updated signatures designed to protect against this threat. SonicWALL has issued the following IPS signature
SonicWALL has developed unique technologies to deliver zero day gateway anti-virus, anti-spyware and intrusion prevention signatures to its subscribers on a continual basis, allowing them to defend against new and existing Internet attacks and exploits such as phishing, viruses, DHA or DoS attacks and more. We are happy to report that computers with installed SonicWAll’s gateway threat prevention services have not been attacked by exploiting this weakness.
SonicWALL, Inc~{The firm}~SonicWall~Sonic}. is committed to providing our customers with easy to use and cost effective network management security. With over one million award-winning appliances shipped through its global network of ten thousand channel partners, SonicWALL Internet security provides end-to-end solutions including Firewalls, SSL VPN’s, Email Security and Continuoinous Data Protection that collectively ensure robust, secure network protection.
