CVE-2007-3701

Published: Jul 11, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

Affected (23)

Products: 3com: Tippingpoint Ips Tos · Tippingpoint: Tipping Point

1 product

Tippingpoint Ips Tos

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
3com Tippingpoint Ips Tos	Version 2.1.4.6324
3com Tippingpoint Ips Tos	Version 2.1
3com Tippingpoint Ips Tos	Version 2.2.1.6506
3com Tippingpoint Ips Tos	Version 2.2.1
3com Tippingpoint Ips Tos	Version 2.2.2
3com Tippingpoint Ips Tos	Version 2.2.3
3com Tippingpoint Ips Tos	Version 2.2.4
3com Tippingpoint Ips Tos	Version 2.2
3com Tippingpoint Ips Tos	Version 2.5.1
3com Tippingpoint Ips Tos	Version 2.5
Tippingpoint Tipping Point	Version 1200
Tippingpoint Tipping Point	Version 1200e
Tippingpoint Tipping Point	Version 200
Tippingpoint Tipping Point	Version 200e
Tippingpoint Tipping Point	Version 2400e
Tippingpoint Tipping Point	Version 400
Tippingpoint Tipping Point	Version 5000e
Tippingpoint Tipping Point	Version 50
Tippingpoint Tipping Point	Version 600e
Tippingpoint Tipping Point	Version sms
Tippingpoint Tipping Point	Version x505
Tippingpoint Tipping Point	Version x506
Tippingpoint Tipping Point	Version zpha

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html

Source: cve@mitre.org

http://osvdb.org/35970

Source: cve@mitre.org

http://secunia.com/advisories/26013

Source: cve@mitre.org

http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.3com.com/securityalert/alerts/3COM-07-003.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/473311/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24855

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/id?1018361

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2490

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35336

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/35970

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26013

Source: af854a3a-2127-422b-91ae-364da2661108

http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.3com.com/securityalert/alerts/3COM-07-003.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/archive/1/473311/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24855

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securitytracker.com/id?1018361

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2490

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35336

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.