CVEvulnerability

CVE-2007-3701

7.5 HIGH Published 2007-07-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

Affected configurations

• tippingpoint tipping point 50 • tippingpoint tipping point 200 • tippingpoint tipping point 200e • tippingpoint tipping point 400 • tippingpoint tipping point 600e • tippingpoint tipping point 1200 • tippingpoint tipping point 1200e • tippingpoint tipping point 2400e • tippingpoint tipping point 5000e • tippingpoint tipping point sms • tippingpoint tipping point x505 • tippingpoint tipping point x506 • tippingpoint tipping point zpha • 3com tippingpoint ips tos 2.1 • 3com tippingpoint ips tos 2.1.4.6324 • 3com tippingpoint ips tos 2.2 • 3com tippingpoint ips tos 2.2.1 • 3com tippingpoint ips tos 2.2.1.6506 • 3com tippingpoint ips tos 2.2.2 • 3com tippingpoint ips tos 2.2.3 • 3com tippingpoint ips tos 2.2.4 • 3com tippingpoint ips tos 2.5 • 3com tippingpoint ips tos 2.5.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References