CVE-2001-0669 Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8....
HighCVSS 7.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco catalyst 6000 intrusion detection system module | All versions | No fix listed |
| cisco secure intrusion detection system | All versions | No fix listed |
| iss realsecure network sensor | = 5.x | No fix listed |
| iss realsecure network sensor | = 6.x | No fix listed |
| iss realsecure server sensor | = 5.5 | No fix listed |
| iss realsecure server sensor | = 6.0 | No fix listed |
| snort | = 1.8.1 | No fix listed |
| enterasys dragon | = 4.x | No fix listed |
References
- 20010905 %u encoding IDS bypass vulnerability mailing-list
- 20010905 Cisco Secure Intrusion Detection System Signature Obfuscation Vulnerability patch vendor-advisory
- VU#548515 third-party-advisory us-government-resource
- 3292 vdb-entry
- 20010905 Multiple Vendor IDS Unicode Bypass Vulnerability patch third-party-advisory vendor-advisory