CVEvulnerability
CVE-2001-0669
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-10-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
Affected configurations
• cisco catalyst 6000 intrusion detection system module
• cisco secure intrusion detection system
• iss realsecure network sensor 5.x
• iss realsecure network sensor 6.x
• iss realsecure server sensor 5.5
• iss realsecure server sensor 6.0
• snort snort 1.8.1
• enterasys dragon 4.x
Related
Referenced by CWE · observed example (1)
- CWE-176 Improper Handling of Unicode Encoding weakness
References
- http://marc.info/?l=bugtraq&m=99972950200602&w=2 marc.info
- http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/548515 US Government Resource
- http://www.securityfocus.com/bid/3292 www.securityfocus.com
- http://xforce.iss.net/alerts/advise95.php Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=99972950200602&w=2 marc.info
- http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/548515 US Government Resource
- http://www.securityfocus.com/bid/3292 www.securityfocus.com
- http://xforce.iss.net/alerts/advise95.php Patch, Vendor Advisory