CVE-2001-0669
- State
- Published
- Severity
- Not scored
- Published
- Oct 12, 2001
- Updated
- Aug 8, 2024
- Reserved
- Aug 27, 2001
Description
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- VU#548515third-party-advisory
- 3292vdb-entry
- 20010905 Cisco Secure Intrusion Detection System Signature Obfuscation Vulnerabilityvendor-advisory
- 20010905 Multiple Vendor IDS Unicode Bypass Vulnerabilitythird-party-advisory
- 20010905 %u encoding IDS bypass vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.