[eddie5659]

Hiya

Once again, if this is the wrong place, please move. Thanks.

Multiple Vendor IDS Unicode Bypass Vulnerability

ISS X-Force is aware of a vulnerability in many commercial and open-
source IDS (Intrusion Detection System) products that may allow
attackers to evade detection. Microsoft Web server products recognize
a non-standard Unicode encoding method, which attackers may use to
obfuscate HTTP-based attacks and evade IDS detection

Affected Versions:

Cisco Secure Intrusion Detection System
(formerly known as NetRanger, Sensor component)
Cisco Catalyst 6000 Intrusion Detection System Module
Dragon Sensor 4.x
ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2
ISS RealSecure Server Sensor 6.0 for Windows
ISS RealSecure Server Sensor 5.5 for Windows
Snort prior to 1.8.1


http://xforce.iss.net/alerts/advise95.php

Regards

eddie