CVE-2007-2690 Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers t...
HighCVSS 7.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss proventia a series xpu | <= 22.10 | No fix listed |
| iss proventia a series xpu | = 20.11 | No fix listed |
| iss proventia a series xpu | = 22.1 | No fix listed |
| iss proventia a series xpu | = 22.2 | No fix listed |
| iss proventia a series xpu | = 22.3 | No fix listed |
| iss proventia a series xpu | = 22.4 | No fix listed |
| iss proventia a series xpu | = 22.5 | No fix listed |
| iss proventia a series xpu | = 22.6 | No fix listed |
| iss proventia g series xpu | <= 22.11 | No fix listed |
| iss proventia g series xpu | = 22.1 | No fix listed |
| iss proventia g series xpu | = 22.2 | No fix listed |
| iss proventia g series xpu | = 22.3 | No fix listed |
| iss proventia g series xpu | = 22.4 | No fix listed |
| iss proventia g series xpu | = 22.5 | No fix listed |
| iss proventia g series xpu | = 22.6 | No fix listed |
| iss proventia g series xpu | = 22.7 | No fix listed |
| iss proventia g series xpu | = 22.8 | No fix listed |
| iss proventia g series xpu | = 22.9 | No fix listed |
| iss proventia g series xpu | = 22.10 | No fix listed |
| iss proventia m series xpu | <= 1.9 | No fix listed |
| iss proventia m series xpu | = 1.1 | No fix listed |
| iss proventia m series xpu | = 1.2 | No fix listed |
| iss proventia m series xpu | = 1.3 | No fix listed |
| iss proventia m series xpu | = 1.4 | No fix listed |
| iss proventia m series xpu | = 1.5 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| iss proventia m series xpu | = 1.6 | No fix listed |
| iss proventia m series xpu | = 1.7 | No fix listed |
| iss proventia m series xpu | = 1.8 | No fix listed |
References
- www.gamasec.net
- VU#739224 third-party-advisory us-government-resource
- 20070515 GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability mailing-list
- 1018068 vdb-entry