Lucene search

[email protected]CVE-2007-2690

HistoryMay 16, 2007 - 1:19 a.m.

CVE-2007-2690

2007-05-1601:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ibm

iss proventia

vulnerability

unicode

character encoding

http traffic

detection

nvd

cve-2007-2690

7.4 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

86.1%

JSON

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

CPENameOperatorVersion
iss:proventia_m_series_xpuiss proventia m series xpueq1.5
iss:proventia_a_series_xpuiss proventia a series xpueq22.2
iss:proventia_m_series_xpuiss proventia m series xpule1.9
iss:proventia_g_series_xpuiss proventia g series xpueq22.5
iss:proventia_m_series_xpuiss proventia m series xpueq1.1
iss:proventia_m_series_xpuiss proventia m series xpueq1.8
iss:proventia_m_series_xpuiss proventia m series xpueq1.6
iss:proventia_a_series_xpuiss proventia a series xpueq22.3
iss:proventia_a_series_xpuiss proventia a series xpule22.10
iss:proventia_g_series_xpuiss proventia g series xpueq22.4

CPE	Name	Operator	Version
iss:proventia_m_series_xpu	iss proventia m series xpu	eq	1.5
iss:proventia_a_series_xpu	iss proventia a series xpu	eq	22.2
iss:proventia_m_series_xpu	iss proventia m series xpu	le	1.9
iss:proventia_g_series_xpu	iss proventia g series xpu	eq	22.5
iss:proventia_m_series_xpu	iss proventia m series xpu	eq	1.1
iss:proventia_m_series_xpu	iss proventia m series xpu	eq	1.8
iss:proventia_m_series_xpu	iss proventia m series xpu	eq	1.6
iss:proventia_a_series_xpu	iss proventia a series xpu	eq	22.3
iss:proventia_a_series_xpu	iss proventia a series xpu	le	22.10
iss:proventia_g_series_xpu	iss proventia g series xpu	eq	22.4

Rows per page:

1-10 of 281

References

www.gamasec.net/english/gs07-01.html

www.kb.cert.org/vuls/id/739224

www.securityfocus.com/archive/1/468633/100/0/threaded

www.securitytracker.com/id?1018068

7.4 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

86.1%

JSON

Related for CVE-2007-2690

cvelist1 prion1