Back to Database
Status published
High
CVE-2007-3701
TippingPoint IPS before 20070710 does not properly handle a hex-encoded...
Vulnerability Description
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3701
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/24855
- http://secunia.com/advisories/26013
- http://www.securitytracker.com/id?1018361
- http://www.3com.com/securityalert/alerts/3COM-07-003.html
- http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html
- http://www.vupen.com/english/advisories/2007/2490
- http://www.securityfocus.com/archive/1/473311/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35336
- http://osvdb.org/35970
Affected Vendor
tippingpoint
View all reports →Affected Software
tipping point, tippingpoint ips tos
Vulnerable Versions:
50, 200, 200e, 400, 600e, 1200, 1200e, 2400e, 5000e, sms, x505, x506, zpha, 2.1, 2.1.4.6324, 2.2, 2.2.1, 2.2.1.6506, 2.2.2, 2.2.3, 2.2.4, 2.5, 2.5.1
Timeline
Official Publish:
July 11th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.