CVE-2007-3701 TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection,...
HighCVSS 7.5
EPSS 8.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tippingpoint tipping point | = 50 | No fix listed |
| tippingpoint tipping point | = 200 | No fix listed |
| tippingpoint tipping point | = 200e | No fix listed |
| tippingpoint tipping point | = 400 | No fix listed |
| tippingpoint tipping point | = 600e | No fix listed |
| tippingpoint tipping point | = 1200 | No fix listed |
| tippingpoint tipping point | = 1200e | No fix listed |
| tippingpoint tipping point | = 2400e | No fix listed |
| tippingpoint tipping point | = 5000e | No fix listed |
| tippingpoint tipping point | = sms | No fix listed |
| tippingpoint tipping point | = x505 | No fix listed |
| tippingpoint tipping point | = x506 | No fix listed |
| tippingpoint tipping point | = zpha | No fix listed |
| 3com tippingpoint ips tos | = 2.1 | No fix listed |
| 3com tippingpoint ips tos | = 2.1.4.6324 | No fix listed |
| 3com tippingpoint ips tos | = 2.2 | No fix listed |
| 3com tippingpoint ips tos | = 2.2.1 | No fix listed |
| 3com tippingpoint ips tos | = 2.2.1.6506 | No fix listed |
| 3com tippingpoint ips tos | = 2.2.2 | No fix listed |
| 3com tippingpoint ips tos | = 2.2.3 | No fix listed |
| 3com tippingpoint ips tos | = 2.2.4 | No fix listed |
| 3com tippingpoint ips tos | = 2.5 | No fix listed |
| 3com tippingpoint ips tos | = 2.5.1 | No fix listed |
References
- 20070710 TippingPoint IPS Signature Evasion mailing-list
- 35970 vdb-entry
- 26013 third-party-advisory
- security-assessment.com exploit patch vendor-advisory
- www.3com.com patch vendor-advisory
- 20070710 TippingPoint IPS Signature Evasion mailing-list
- 24855 exploit vdb-entry
- 1018361 vdb-entry
- ADV-2007-2490 vdb-entry
- tippingpoint-hex-security-byass(35336) vdb-entry