CVE-2007-2734 The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP tr...
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3com 3crtpx505-73 | All versions | No fix listed |
| 3com 3crx506-96 | All versions | No fix listed |
| 3com tippingpoint 200 | All versions | No fix listed |
| 3com tippingpoint 200e | All versions | No fix listed |
| 3com tippingpoint 2400e | All versions | No fix listed |
| 3com tippingpoint 50 | All versions | No fix listed |
| 3com tippingpoint 5000e | All versions | No fix listed |
| 3com tippingpoint 600e | All versions | No fix listed |
References
- 35968 vdb-entry
- 25302 patch third-party-advisory vendor-advisory
- 2712 third-party-advisory
- www.3com.com
- www.gamasec.net
- VU#739224 third-party-advisory us-government-resource
- 20070515 GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability mailing-list
- ADV-2007-1817 vdb-entry