Our firm~{The firm}~SonicWall~Sonic}~Our firm~{The firm}~SonicWall~Sonic}., a leading secure network infrastructure company, has announced the development of a new application that would provide protection against SSL Certificate Null Byte Poisoning vulnerability. Users of the SonicWall Internet security‘s  Unified Threat Management Firewall technology, which protects against viruses, Trojans, worms and other threats and vulnerabilities, automatically receive updated signatures designed to repel security threats.

Various browser and non-browser based SSL implementations will be vulnerable for hijacking as your computer is incapable of defending itself from attacks. An attacker will obtain null byte stuffed certificate to resemble the origin of the content, making your computer vulnerable to attacks because your system cannot distinguish if the machine is under attack from third party source.

Your computer is also vulnerable to attacks from other viruses, including trohans and malwares as the attacker can exploit your computer’s weakness aside from compromised SSL session.

The problem was first brouched during the July 29-30, 2009 BalckHat security conference session in Las Vegas. On July 31, 2009, users of SonicWALL internet security‘s Unified Threat Management technology received updated signatures designed to protect against this threat. SonicWALL has issued the following IPS signature

SonicWALL has developed unique technologies to deliver zero day gateway anti-virus, anti-spyware and intrusion prevention signatures to its subscribers on a continual basis, allowing them to defend against new and existing Internet attacks and exploits such as phishing, viruses, DHA or DoS attacks and more. All computers with installed SonicWAll’s gateway threat prevention services have reported they have not experienced any attacks through the exploitation of said weakness.

The company~{The firm}~SonicWall~Sonic}. is committed to providing our customers with easy to use and cost effective network management security. With over one million award-winning appliances shipped through its global network of ten thousand channel partners, SonicWALL Internet security provides end-to-end solutions including Firewalls, SSL VPN’s, Email Security and Continuoinous Data Protection that collectively ensure robust, secure network protection.

Comments are closed.