NetSight
IP …
high7.5Public exploit code

CVE-2007-3701

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send cer…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

Affected products

VendorProductAffected versions
TippingpointTipping Point
Versions 50, 200, 200e, 400, 600e, 1200
3comTippingpoint Ips Tos
Versions 2.1, 2.1.4.6324, 2.2, 2.2.1, 2.2.1.6506, 2.2.2

Weakness classification

CWE-20

References