7.5

CVE-2001-0669

EPSS 41.48%
Veröffentlicht 30.10.2001 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Catalyst 6000 Intrusion Detection System Module

Cisco ≫ Secure Intrusion Detection System

Iss ≫ Realsecure Network Sensor Version5.x

Iss ≫ Realsecure Network Sensor Version6.x

Iss ≫ Realsecure Server Sensor Version5.5

Iss ≫ Realsecure Server Sensor Version6.0

Snort ≫ Snort Version1.8.1

Enterasys ≫ Dragon Version4.x

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	41.48%	0.972

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://marc.info/?l=bugtraq&m=99972950200602&w=2

http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/548515

US Government Resource

http://www.securityfocus.com/bid/3292

http://xforce.iss.net/alerts/advise95.php

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2001-0669

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-0669

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-0669

EUVD