CVE-2007-2690

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-2690
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

7.8 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://www.gamasec.net/english/gs07-01.html
http://www.kb.cert.org/vuls/id/739224 US Government Resource
http://www.securityfocus.com/archive/1/468633/100/0/threaded
http://www.securitytracker.com/id?1018068
http://www.gamasec.net/english/gs07-01.html
http://www.kb.cert.org/vuls/id/739224 US Government Resource
http://www.securityfocus.com/archive/1/468633/100/0/threaded
http://www.securitytracker.com/id?1018068
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:iss:proventia_a_series_xpu:*:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_a_series_xpu:20.11:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_a_series_xpu:22.1:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_a_series_xpu:22.2:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_a_series_xpu:22.3:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_a_series_xpu:22.4:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_a_series_xpu:22.5:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_a_series_xpu:22.6:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:*:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.1:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.2:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.3:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.4:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.5:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.6:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.7:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.8:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.9:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_g_series_xpu:22.10:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:*:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.1:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.2:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.3:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.4:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.5:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.6:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.7:*:*:*:*:*:*:*
cpe:2.3:h:iss:proventia_m_series_xpu:1.8:*:*:*:*:*:*:*
History

21 Nov 2024, 00:31

Type Values Removed Values Added
References () http://www.gamasec.net/english/gs07-01.html - () http://www.gamasec.net/english/gs07-01.html -
References () http://www.kb.cert.org/vuls/id/739224 - US Government Resource () http://www.kb.cert.org/vuls/id/739224 - US Government Resource
References () http://www.securityfocus.com/archive/1/468633/100/0/threaded - () http://www.securityfocus.com/archive/1/468633/100/0/threaded -
References () http://www.securitytracker.com/id?1018068 - () http://www.securitytracker.com/id?1018068 -
Information

Published : 2007-05-16 01:19

Updated : 2024-11-21 00:31

NVD link : CVE-2007-2690

Mitre link : CVE-2007-2690

CVE.ORG link : CVE-2007-2690

JSON object : View

Products Affected

iss

  • proventia_a_series_xpu
  • proventia_g_series_xpu
  • proventia_m_series_xpu
CWE
NVD-CWE-Other