VDB
CVE-2001-0669
CVE-2001-0669
PUBLISHED
CVSS 7.5 HIGH
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
EPSS 41.48% · 97.5th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
41.48%
97.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| iss | realsecure_network_sensor | 5.x, * |
| enterasys | dragon | 4.x |
| n/a | n/a | n/a |
| iss | realsecure_server_sensor | 5.5, 6.0 |
| snort | snort | 1.8.1 |
| cisco | secure_intrusion_detection_system | |
| cisco | catalyst_6000_intrusion_detection_system_module |
Timeline
- Sep 5, 2001 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- VU#548515 third-party-advisory
- 3292 vdb
- 20010905 Cisco Secure Intrusion Detection System Signature Obfuscation Vulnerability vendor-advisory
- 20010905 Multiple Vendor IDS Unicode Bypass Vulnerability third-party-advisory
- 20010905 %u encoding IDS bypass vulnerability mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2001-0669 advisory