7.5

CVE-2001-0669

EPSS 14.76%
Published 30.10.2001 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Catalyst 6000 Intrusion Detection System Module

Cisco ≫ Secure Intrusion Detection System

Iss ≫ Realsecure Network Sensor Version5.x

Iss ≫ Realsecure Network Sensor Version6.x

Iss ≫ Realsecure Server Sensor Version5.5

Iss ≫ Realsecure Server Sensor Version6.0

Snort ≫ Snort Version1.8.1

Enterasys ≫ Dragon Version4.x

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	14.76%	0.939

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://marc.info/?l=bugtraq&m=99972950200602&w=2

http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/548515

US Government Resource

http://www.securityfocus.com/bid/3292

http://xforce.iss.net/alerts/advise95.php

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2001-0669

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-0669

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-0669

EUVD