CVEvulnerability
CVE-2007-3701
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
Affected configurations
• tippingpoint tipping point 50
• tippingpoint tipping point 200
• tippingpoint tipping point 200e
• tippingpoint tipping point 400
• tippingpoint tipping point 600e
• tippingpoint tipping point 1200
• tippingpoint tipping point 1200e
• tippingpoint tipping point 2400e
• tippingpoint tipping point 5000e
• tippingpoint tipping point sms
• tippingpoint tipping point x505
• tippingpoint tipping point x506
• tippingpoint tipping point zpha
• 3com tippingpoint ips tos 2.1
• 3com tippingpoint ips tos 2.1.4.6324
• 3com tippingpoint ips tos 2.2
• 3com tippingpoint ips tos 2.2.1
• 3com tippingpoint ips tos 2.2.1.6506
• 3com tippingpoint ips tos 2.2.2
• 3com tippingpoint ips tos 2.2.3
• 3com tippingpoint ips tos 2.2.4
• 3com tippingpoint ips tos 2.5
• 3com tippingpoint ips tos 2.5.1
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html lists.grok.org.uk
- http://osvdb.org/35970 osvdb.org
- http://secunia.com/advisories/26013 secunia.com
- http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf Exploit, Patch, Vendor Advisory
- http://www.3com.com/securityalert/alerts/3COM-07-003.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/473311/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24855 Exploit
- http://www.securitytracker.com/id?1018361 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2490 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35336 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html lists.grok.org.uk
- http://osvdb.org/35970 osvdb.org
- http://secunia.com/advisories/26013 secunia.com
- http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf Exploit, Patch, Vendor Advisory
- http://www.3com.com/securityalert/alerts/3COM-07-003.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/473311/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24855 Exploit
- http://www.securitytracker.com/id?1018361 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2490 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35336 exchange.xforce.ibmcloud.com