CVE-2007-2690

Severity

78%

Complexity

99%

Confidentiality

115%

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

CVSS 2.0 Base Score 7.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:C).

Overview

Type

Internet Security Systems Proventia

First reported 17 years ago

2007-05-16 01:19:00

Last updated 6 years ago

2018-10-16 16:45:00

Affected Software

Internet Security Systems Proventia A Series XPU 20.11

20.11

Internet Security Systems Proventia A Series XPU 22.1

22.1

Internet Security Systems Proventia A Series XPU 22.2

22.2

Internet Security Systems Proventia A Series XPU 22.3

22.3

Internet Security Systems Proventia A Series XPU 22.4

22.4

Internet Security Systems Proventia A Series XPU 22.5

22.5

Internet Security Systems Proventia A Series XPU 22.6

22.6

Internet Security Systems Proventia A Series XPU

Internet Security Systems Proventia G Series XPU 22.1

22.1

Internet Security Systems Proventia G Series XPU 22.2

22.2

Internet Security Systems Proventia G Series XPU 22.3

22.3

Internet Security Systems Proventia G Series XPU 22.4

22.4

Internet Security Systems Proventia G Series XPU 22.5

22.5

Internet Security Systems Proventia G Series XPU 22.6

22.6

Internet Security Systems Proventia G Series XPU 22.7

22.7

Internet Security Systems Proventia G Series XPU 22.8

22.8

Internet Security Systems Proventia G Series XPU 22.9

22.9

Internet Security Systems Proventia G Series XPU 22.10

22.10

Internet Security Systems Proventia G Series XPU

Internet Security Systems Proventia M Series XPU 1.1

1.1

Internet Security Systems Proventia M Series XPU 1.2

1.2

Internet Security Systems Proventia M Series XPU 1.3

1.3

Internet Security Systems Proventia M Series XPU 1.4

1.4

Internet Security Systems Proventia M Series XPU 1.5

1.5

Internet Security Systems Proventia M Series XPU 1.6

1.6

Internet Security Systems Proventia M Series XPU 1.7

1.7

Internet Security Systems Proventia M Series XPU 1.8

1.8

Internet Security Systems Proventia M Series XPU

References

http://www.gamasec.net/english/gs07-01.html

VU#739224

US Government Resource

20070515 GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability

1018068

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.