CVE-2007-2688

Published: May 16, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Affected (23)

Products: Cisco: Ips Sensor Software, Ios

2 products

Ips Sensor Software

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Cisco Ips Sensor Software	Version 4.0
Cisco Ips Sensor Software	Version 5.0(1)
Cisco Ips Sensor Software	Version 5.0(2)
Cisco Ips Sensor Software	Version 5.0(6)p1
Cisco Ips Sensor Software	Version 5.1(1)
Cisco Ips Sensor Software	Version 5.1(1a)
Cisco Ips Sensor Software	Version 5.1(1b)
Cisco Ips Sensor Software	Version 5.1(1c)
Cisco Ips Sensor Software	Version 5.1(1d)
Cisco Ips Sensor Software	Version 5.1(1e)
Cisco Ips Sensor Software	Version 5.1(p1)

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 10.0
Cisco Ios	Version 11.1cc
Cisco Ios	Version 11.3
Cisco Ios	Version 12.0
Cisco Ios	Version 12.0s
Cisco Ios	Version 12.0st
Cisco Ios	Version 12.0t
Cisco Ios	Version 12.1
Cisco Ios	Version 12.1e
Cisco Ios	Version 12.1t
Cisco Ios	Version 12.2
Cisco Ios	Version 12.2t

References (24)

http://secunia.com/advisories/25285

Source: cve@mitre.org

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_response09186a008083f82e.html

Source: cve@mitre.org

http://www.gamasec.net/english/gs07-01.html

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/739224

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/35336

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/468633/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23980

Source: cve@mitre.org

http://www.securitytracker.com/id?1018053

Source: cve@mitre.org

http://www.securitytracker.com/id?1018054

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1803

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34277

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5465

Source: cve@mitre.org

http://secunia.com/advisories/25285

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_response09186a008083f82e.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gamasec.net/english/gs07-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/739224

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/35336

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/468633/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23980

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018053

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018054

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1803

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34277

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5465

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.