high7.8
CVE-2007-2690
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodi…
Impact
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iss | Proventia A Series Xpu | through 22.10 Versions 20.11, 22.1, 22.2, 22.3, 22.4 |
| Iss | Proventia G Series Xpu | through 22.11 Versions 22.1, 22.2, 22.3, 22.4, 22.5 |
| Iss | Proventia M Series Xpu | through 1.9 Versions 1.1, 1.2, 1.3, 1.4, 1.5 |
References
- NVD record
- CVE.org record
- http://www.gamasec.net/english/gs07-01.html
- http://www.kb.cert.org/vuls/id/739224
- http://www.securityfocus.com/archive/1/468633/100/0/threaded
- http://www.securitytracker.com/id?1018068
- http://www.gamasec.net/english/gs07-01.html
- http://www.kb.cert.org/vuls/id/739224
- http://www.securityfocus.com/archive/1/468633/100/0/threaded
- http://www.securitytracker.com/id?1018068