CVEvulnerability

CVE-2007-2688

7.8 HIGH Published 2007-05-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Affected configurations

• cisco ips sensor software 4.0 • cisco ips sensor software 5.0\(1\) • cisco ips sensor software 5.0\(2\) • cisco ips sensor software 5.0\(6\)p1 • cisco ips sensor software 5.1\(1\) • cisco ips sensor software 5.1\(1a\) • cisco ips sensor software 5.1\(1b\) • cisco ips sensor software 5.1\(1c\) • cisco ips sensor software 5.1\(1d\) • cisco ips sensor software 5.1\(1e\) • cisco ips sensor software 5.1\(p1\) • cisco ios 10.0 • cisco ios 11.1cc • cisco ios 11.3 • cisco ios 12.0 • cisco ios 12.0s • cisco ios 12.0st • cisco ios 12.0t • cisco ios 12.1 • cisco ios 12.1e • cisco ios 12.1t • cisco ios 12.2 • cisco ios 12.2t

References