Check Point Advisories

Security Best Practice: Familiarize Yourself with the ASCII Only Response Headers Protection

Check Point Reference:	SBP-2008-21
Date Published:	15 Aug 2008
Severity:	Low
Last Updated:	Wednesday 17 March, 2010
Source:	IPS Research Center
Protection Provided by:
Who is Vulnerable?	Web Servers
Vulnerability Description	HTTP Protocol Inspection provides strict enforcement of the HTTP protocol, ensuring these sessions comply with RFC standards and common security practices. Various attacks use binary and other non-ASCII characters to deliver worms and other malicious content to web servers.
Vulnerability Details	This protection allows you to force all HTTP headers in an HTTP response to be ASCII only. This will prevent some malicious content from passing in the HTTP protocol headers of an HTTP response.