NetSight
IP …
high7.8

CVE-2007-2688

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character en…

Impact

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Affected products

VendorProductAffected versions
CiscoIps Sensor Software
Versions 4.0, 5.0\(1\), 5.0\(2\), 5.0\(6\)p1, 5.1\(1\), 5.1\(1a\)
CiscoIos
Versions 10.0, 11.1cc, 11.3, 12.0, 12.0s, 12.0st

References