Lucene search

[email protected]CVE-2007-2688

HistoryMay 16, 2007 - 1:19 a.m.

CVE-2007-2688

2007-05-1601:19:00

[email protected]

web.nvd.nist.gov

cisco

ips

ios

firewall

unicode

http

traffic

evasion

vulnerability

nvd

cve-2007-2688

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

JSON

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Affected configurations

NVD

Node

ciscoips_sensor_softwareMatch4.0

ciscoips_sensor_softwareMatch5.0\(1\)

ciscoips_sensor_softwareMatch5.0\(2\)

ciscoips_sensor_softwareMatch5.0\(6\)p1

ciscoips_sensor_softwareMatch5.1\(1\)

ciscoips_sensor_softwareMatch5.1\(1a\)

ciscoips_sensor_softwareMatch5.1\(1b\)

ciscoips_sensor_softwareMatch5.1\(1c\)

ciscoips_sensor_softwareMatch5.1\(1d\)

ciscoips_sensor_softwareMatch5.1\(1e\)

ciscoips_sensor_softwareMatch5.1\(p1\)

Node

ciscoiosMatch10.0

ciscoiosMatch11.1cc

ciscoiosMatch11.3

ciscoiosMatch12.0

ciscoiosMatch12.0s

ciscoiosMatch12.0st

ciscoiosMatch12.0t

ciscoiosMatch12.1

ciscoiosMatch12.1e

ciscoiosMatch12.1t

ciscoiosMatch12.2

ciscoiosMatch12.2t

CPENameOperatorVersion
cisco:ips_sensor_softwarecisco ips sensor softwareeq4.0
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.0\(1\)
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.0\(2\)
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.0\(6\)p1
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.1\(1\)
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.1\(1a\)
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.1\(1b\)
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.1\(1c\)
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.1\(1d\)
cisco:ips_sensor_softwarecisco ips sensor softwareeq5.1\(1e\)

CPE	Name	Operator	Version
cisco:ips_sensor_software	cisco ips sensor software	eq	4.0
cisco:ips_sensor_software	cisco ips sensor software	eq	5.0\(1\)
cisco:ips_sensor_software	cisco ips sensor software	eq	5.0\(2\)
cisco:ips_sensor_software	cisco ips sensor software	eq	5.0\(6\)p1
cisco:ips_sensor_software	cisco ips sensor software	eq	5.1\(1\)
cisco:ips_sensor_software	cisco ips sensor software	eq	5.1\(1a\)
cisco:ips_sensor_software	cisco ips sensor software	eq	5.1\(1b\)
cisco:ips_sensor_software	cisco ips sensor software	eq	5.1\(1c\)
cisco:ips_sensor_software	cisco ips sensor software	eq	5.1\(1d\)
cisco:ips_sensor_software	cisco ips sensor software	eq	5.1\(1e\)

Rows per page:

1-10 of 111

References

secunia.com/advisories/25285

www.cisco.com/en/US/products/products_security_response09186a008083f82e.html

www.gamasec.net/english/gs07-01.html

www.kb.cert.org/vuls/id/739224

www.osvdb.org/35336

www.securityfocus.com/archive/1/468633/100/0/threaded

www.securityfocus.com/bid/23980

www.securitytracker.com/id?1018053

www.securitytracker.com/id?1018054

www.vupen.com/english/advisories/2007/1803

exchange.xforce.ibmcloud.com/vulnerabilities/34277

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5465

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

JSON

Related for CVE-2007-2688

cvelist1 prion1 nvd1 checkpoint_advisories1