Search criteria

12 vulnerabilities found for tippingpoint_ips_tos by 3com

FKIE_CVE-2007-3711

Vulnerability from fkie_nvd - Published: 2007-07-11 23:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.
References
cve@mitre.orghttp://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html
cve@mitre.orghttp://osvdb.org/35969
cve@mitre.orghttp://secunia.com/advisories/26017Vendor Advisory
cve@mitre.orghttp://www.3com.com/securityalert/alerts/3COM-07-002.htmlVendor Advisory
cve@mitre.orghttp://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf
cve@mitre.orghttp://www.securityfocus.com/archive/1/473394/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/24861
cve@mitre.orghttp://www.securitytracker.com/id?1018386
cve@mitre.orghttp://www.vupen.com/english/advisories/2007/2489
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/35343
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/35969
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/26017Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.3com.com/securityalert/alerts/3COM-07-002.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/473394/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/24861
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1018386
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/2489
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/35343
Impacted products
Vendor Product Version
3com tippingpoint_ips_tos 2.1
3com tippingpoint_ips_tos 2.1.4.6324
3com tippingpoint_ips_tos 2.2
3com tippingpoint_ips_tos 2.2.1
3com tippingpoint_ips_tos 2.2.1.6506
3com tippingpoint_ips_tos 2.2.2
3com tippingpoint_ips_tos 2.2.3
3com tippingpoint_ips_tos 2.2.4
3com tippingpoint_ips_tos 2.5
3com tippingpoint_ips_tos 2.5.1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "53E6DE7F-8507-4C37-A935-554D9F875C69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.1.4.6324:*:*:*:*:*:*:*",
              "matchCriteriaId": "6654346B-3574-48D1-9A0B-2750D6FF4D96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "78E1B6D6-F779-451E-B4A9-E04D153F7F0C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BCF4262-3F3F-44D7-BE61-1FDCF885C95F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.1.6506:*:*:*:*:*:*:*",
              "matchCriteriaId": "276F1810-A4E9-4621-A81A-19EED8146E60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "272C0A76-2981-42EC-8D85-D33293BE96FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F789A9E-34D3-4C17-AAD3-9DA6B940FA45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "87DD0AC2-05E3-4BE7-8EB6-60FA011AA742",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B929C12-052F-4A42-B155-7A51152B902A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F34B833-674E-4373-A9E1-62EA0A5F690E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en TOS 2.1.x, 2.2.x versiones anteriores a 2.2.5, y 2.5.x versiones anteriores a 2.5.2 en TippingPoint IPS permite a atacantes remotos evitar detecci\u00f3n al enviar determinados fragmentos de paquetes."
    }
  ],
  "id": "CVE-2007-3711",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-07-11T23:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/35969"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26017"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/24861"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018386"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2489"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/35969"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26017"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/24861"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018386"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2489"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2007-3701

Vulnerability from fkie_nvd - Published: 2007-07-11 23:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
References
cve@mitre.orghttp://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html
cve@mitre.orghttp://osvdb.org/35970
cve@mitre.orghttp://secunia.com/advisories/26013
cve@mitre.orghttp://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdfExploit, Patch, Vendor Advisory
cve@mitre.orghttp://www.3com.com/securityalert/alerts/3COM-07-003.htmlPatch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/archive/1/473311/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/24855Exploit
cve@mitre.orghttp://www.securitytracker.com/id?1018361
cve@mitre.orghttp://www.vupen.com/english/advisories/2007/2490
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/35336
af854a3a-2127-422b-91ae-364da2661108http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/35970
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/26013
af854a3a-2127-422b-91ae-364da2661108http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdfExploit, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.3com.com/securityalert/alerts/3COM-07-003.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/473311/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/24855Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1018361
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/2490
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/35336
Impacted products
Vendor Product Version
tippingpoint tipping_point 50
tippingpoint tipping_point 200
tippingpoint tipping_point 200e
tippingpoint tipping_point 400
tippingpoint tipping_point 600e
tippingpoint tipping_point 1200
tippingpoint tipping_point 1200e
tippingpoint tipping_point 2400e
tippingpoint tipping_point 5000e
tippingpoint tipping_point sms
tippingpoint tipping_point x505
tippingpoint tipping_point x506
tippingpoint tipping_point zpha
3com tippingpoint_ips_tos 2.1
3com tippingpoint_ips_tos 2.1.4.6324
3com tippingpoint_ips_tos 2.2
3com tippingpoint_ips_tos 2.2.1
3com tippingpoint_ips_tos 2.2.1.6506
3com tippingpoint_ips_tos 2.2.2
3com tippingpoint_ips_tos 2.2.3
3com tippingpoint_ips_tos 2.2.4
3com tippingpoint_ips_tos 2.5
3com tippingpoint_ips_tos 2.5.1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:50:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB5F28CE-F2B6-4046-A64D-2440F55805AA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:200:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF5DF349-CCA6-4FEE-8FAC-287F716F6AF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:200e:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DF66411-CA2B-4266-95CB-8AEE03A795B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:400:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E30A414-9708-4B14-B57D-553976B597C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:600e:*:*:*:*:*:*:*",
              "matchCriteriaId": "109CF8E2-8CC1-4174-9E60-A0A989890928",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:1200:*:*:*:*:*:*:*",
              "matchCriteriaId": "9790414A-7035-4852-B3E4-7DABAE40484A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:1200e:*:*:*:*:*:*:*",
              "matchCriteriaId": "600DD1DA-8F5E-4F49-B7E7-281F516FD8CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:2400e:*:*:*:*:*:*:*",
              "matchCriteriaId": "33473E85-DA13-4137-9383-E9E3B2786488",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:5000e:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDB1FD87-E9A0-451D-B16C-82E757C3B250",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:sms:*:*:*:*:*:*:*",
              "matchCriteriaId": "749DD189-9E19-4680-BC9C-EF65EE59213C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:x505:*:*:*:*:*:*:*",
              "matchCriteriaId": "A924AD38-3CA6-4481-8AF8-83921397B31C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:x506:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB074347-0AEE-40F1-8770-D449A3A61C25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tippingpoint:tipping_point:zpha:*:*:*:*:*:*:*",
              "matchCriteriaId": "F346F19E-8B9D-44E5-B0E1-A80B629790C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "53E6DE7F-8507-4C37-A935-554D9F875C69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.1.4.6324:*:*:*:*:*:*:*",
              "matchCriteriaId": "6654346B-3574-48D1-9A0B-2750D6FF4D96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "78E1B6D6-F779-451E-B4A9-E04D153F7F0C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BCF4262-3F3F-44D7-BE61-1FDCF885C95F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.1.6506:*:*:*:*:*:*:*",
              "matchCriteriaId": "276F1810-A4E9-4621-A81A-19EED8146E60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "272C0A76-2981-42EC-8D85-D33293BE96FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F789A9E-34D3-4C17-AAD3-9DA6B940FA45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "87DD0AC2-05E3-4BE7-8EB6-60FA011AA742",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B929C12-052F-4A42-B155-7A51152B902A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F34B833-674E-4373-A9E1-62EA0A5F690E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode \u0027/\u0027 (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack."
    },
    {
      "lang": "es",
      "value": "TippingPoint IPS versiones anteriores a 20070710 no maneja apropiadamente el alternativo codificado en hexadecimal de un caracter \u0027/\u0027 (barra), lo cual podr\u00eda permitir a atacantes remotos enviar determinado tr\u00e1fico de red y evitar la detecci\u00f3n, como se demuestra con un ataque de cmd.exe."
    }
  ],
  "id": "CVE-2007-3701",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-07-11T23:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/35970"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26013"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/24855"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018361"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2490"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/35970"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26013"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/24855"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018361"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2490"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2006-3678

Vulnerability from fkie_nvd - Published: 2006-07-26 23:04 - Updated: 2025-04-03 01:03
Severity ?
Summary
TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page fault), via a malformed packet.
References
cve@mitre.orghttp://secunia.com/advisories/21154
cve@mitre.orghttp://securityreason.com/securityalert/1286
cve@mitre.orghttp://securitytracker.com/id?1016562
cve@mitre.orghttp://www.3com.com/securityalert/alerts/3COM-06-003.htmlPatch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/archive/1/440944/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/19125
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/2956
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/27934
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21154
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/1286
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016562
af854a3a-2127-422b-91ae-364da2661108http://www.3com.com/securityalert/alerts/3COM-06-003.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/440944/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19125
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2956
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27934
Impacted products
Vendor Product Version
3com tippingpoint_ips_tos *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "225C0A41-4A74-4246-A752-73B580F8EF38",
              "versionEndIncluding": "2.2.3.6514",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to \"force the device into layer 2 fallback (L2FB)\", causing a denial of service (page fault), via a malformed packet."
    },
    {
      "lang": "es",
      "value": "TippingPoint IPS bajo TippingPoint Operating System (TOS) anterior a 2.2.4.6519 permite a atacantes remotos \"forzar al dispositivo dentro de (L2FB) \" (layer 2 fallback), provocando una denegaci\u00f3n de servicio (fallo de pagina), a trav\u00e9s de paquetes malformados.\r\n"
    }
  ],
  "id": "CVE-2006-3678",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-07-26T23:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/21154"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/1286"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1016562"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/19125"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/2956"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21154"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/1286"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1016562"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/19125"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/2956"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-254"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2006-0362

Vulnerability from fkie_nvd - Published: 2006-01-22 20:03 - Updated: 2025-04-03 01:03
Severity ?
Summary
TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header.
References
cve@mitre.orghttp://isc.sans.org/diary.php?storyid=1042Patch
cve@mitre.orghttp://secunia.com/advisories/18515
cve@mitre.orghttp://securitytracker.com/id?1015511
cve@mitre.orghttp://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp
cve@mitre.orghttp://www.osvdb.org/22504Patch
cve@mitre.orghttp://www.securityfocus.com/bid/16299
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/24200
af854a3a-2127-422b-91ae-364da2661108http://isc.sans.org/diary.php?storyid=1042Patch
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18515
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015511
af854a3a-2127-422b-91ae-364da2661108http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/22504Patch
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/16299
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/24200
Impacted products
Vendor Product Version
3com tippingpoint_ips_tos *
3com tippingpoint_ips_tos 2.2.0.6504
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7394B102-F6A5-400A-A6FB-77F9F165DC7E",
              "versionEndIncluding": "2.1.3.6323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.0.6504:*:*:*:*:*:*:*",
              "matchCriteriaId": "E02698EC-073F-4C85-8C9F-4473067553DB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header."
    },
    {
      "lang": "es",
      "value": "TippingPoint Intrusion Prevention System (IPS) TOS en versiones anteriores a 2.1.4.6324 y TOS 2.2.x en versiones anteriores a 2.2.1.6506, permiten a atacantes remotos provocar una denegaci\u00f3n de servicio (consumo de CPU) a trav\u00e9s de un vector desconocido, probablemente involucrando una petici\u00f3n HTTP con un n\u00famero negativo en la cabezera Content-Length."
    }
  ],
  "id": "CVE-2006-0362",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-01-22T20:03:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://isc.sans.org/diary.php?storyid=1042"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18515"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015511"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.osvdb.org/22504"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/16299"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://isc.sans.org/diary.php?storyid=1042"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18515"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015511"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.osvdb.org/22504"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/16299"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2007-3711 (GCVE-0-2007-3711)

Vulnerability from cvelistv5 – Published: 2007-07-11 23:00 – Updated: 2024-08-07 14:28
VLAI?
Summary
Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.099Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
          },
          {
            "name": "24861",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24861"
          },
          {
            "name": "ADV-2007-2489",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2489"
          },
          {
            "name": "26017",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26017"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
          },
          {
            "name": "tippingpoint-fragmented-security-bypass(35343)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
          },
          {
            "name": "1018386",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018386"
          },
          {
            "name": "20070611 TippingPoint detection bypass",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
          },
          {
            "name": "35969",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/35969"
          },
          {
            "name": "20070711 TippingPoint detection bypass",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
        },
        {
          "name": "24861",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24861"
        },
        {
          "name": "ADV-2007-2489",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2489"
        },
        {
          "name": "26017",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26017"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
        },
        {
          "name": "tippingpoint-fragmented-security-bypass(35343)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
        },
        {
          "name": "1018386",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018386"
        },
        {
          "name": "20070611 TippingPoint detection bypass",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
        },
        {
          "name": "35969",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/35969"
        },
        {
          "name": "20070711 TippingPoint detection bypass",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3711",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf",
              "refsource": "MISC",
              "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
            },
            {
              "name": "24861",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24861"
            },
            {
              "name": "ADV-2007-2489",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2489"
            },
            {
              "name": "26017",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26017"
            },
            {
              "name": "http://www.3com.com/securityalert/alerts/3COM-07-002.html",
              "refsource": "CONFIRM",
              "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
            },
            {
              "name": "tippingpoint-fragmented-security-bypass(35343)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
            },
            {
              "name": "1018386",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018386"
            },
            {
              "name": "20070611 TippingPoint detection bypass",
              "refsource": "FULLDISC",
              "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
            },
            {
              "name": "35969",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/35969"
            },
            {
              "name": "20070711 TippingPoint detection bypass",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3711",
    "datePublished": "2007-07-11T23:00:00",
    "dateReserved": "2007-07-11T00:00:00",
    "dateUpdated": "2024-08-07T14:28:52.099Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-3701 (GCVE-0-2007-3701)

Vulnerability from cvelistv5 – Published: 2007-07-11 23:00 – Updated: 2024-08-07 14:28
VLAI?
Summary
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:51.991Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24855",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24855"
          },
          {
            "name": "26013",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26013"
          },
          {
            "name": "1018361",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018361"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
          },
          {
            "name": "20070710 TippingPoint IPS Signature Evasion",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
          },
          {
            "name": "ADV-2007-2490",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2490"
          },
          {
            "name": "20070710 TippingPoint IPS Signature Evasion",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
          },
          {
            "name": "tippingpoint-hex-security-byass(35336)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
          },
          {
            "name": "35970",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/35970"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode \u0027/\u0027 (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24855",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24855"
        },
        {
          "name": "26013",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26013"
        },
        {
          "name": "1018361",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018361"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
        },
        {
          "name": "20070710 TippingPoint IPS Signature Evasion",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
        },
        {
          "name": "ADV-2007-2490",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2490"
        },
        {
          "name": "20070710 TippingPoint IPS Signature Evasion",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
        },
        {
          "name": "tippingpoint-hex-security-byass(35336)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
        },
        {
          "name": "35970",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/35970"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3701",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode \u0027/\u0027 (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24855",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24855"
            },
            {
              "name": "26013",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26013"
            },
            {
              "name": "1018361",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018361"
            },
            {
              "name": "http://www.3com.com/securityalert/alerts/3COM-07-003.html",
              "refsource": "CONFIRM",
              "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
            },
            {
              "name": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf",
              "refsource": "MISC",
              "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
            },
            {
              "name": "20070710 TippingPoint IPS Signature Evasion",
              "refsource": "FULLDISC",
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
            },
            {
              "name": "ADV-2007-2490",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2490"
            },
            {
              "name": "20070710 TippingPoint IPS Signature Evasion",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
            },
            {
              "name": "tippingpoint-hex-security-byass(35336)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
            },
            {
              "name": "35970",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/35970"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3701",
    "datePublished": "2007-07-11T23:00:00",
    "dateReserved": "2007-07-11T00:00:00",
    "dateUpdated": "2024-08-07T14:28:51.991Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-3678 (GCVE-0-2006-3678)

Vulnerability from cvelistv5 – Published: 2006-07-26 23:00 – Updated: 2024-08-07 18:39
VLAI?
Summary
TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page fault), via a malformed packet.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.3com.com/securityalert/alerts/3COM-06-… x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/2956 vdb-entryx_refsource_VUPEN
http://securityreason.com/securityalert/1286 third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/19125 vdb-entryx_refsource_BID
http://securitytracker.com/id?1016562 vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/440944/100… mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/21154 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:39:53.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
          },
          {
            "name": "ADV-2006-2956",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2956"
          },
          {
            "name": "1286",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1286"
          },
          {
            "name": "19125",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19125"
          },
          {
            "name": "1016562",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016562"
          },
          {
            "name": "20060724 [CYBSEC] TippingPoint detection bypass",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
          },
          {
            "name": "21154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21154"
          },
          {
            "name": "tippingpoint-ips-pagefault-detection-bypass(27934)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to \"force the device into layer 2 fallback (L2FB)\", causing a denial of service (page fault), via a malformed packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
        },
        {
          "name": "ADV-2006-2956",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2956"
        },
        {
          "name": "1286",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1286"
        },
        {
          "name": "19125",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19125"
        },
        {
          "name": "1016562",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016562"
        },
        {
          "name": "20060724 [CYBSEC] TippingPoint detection bypass",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
        },
        {
          "name": "21154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21154"
        },
        {
          "name": "tippingpoint-ips-pagefault-detection-bypass(27934)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3678",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to \"force the device into layer 2 fallback (L2FB)\", causing a denial of service (page fault), via a malformed packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.3com.com/securityalert/alerts/3COM-06-003.html",
              "refsource": "CONFIRM",
              "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
            },
            {
              "name": "ADV-2006-2956",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2956"
            },
            {
              "name": "1286",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1286"
            },
            {
              "name": "19125",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19125"
            },
            {
              "name": "1016562",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016562"
            },
            {
              "name": "20060724 [CYBSEC] TippingPoint detection bypass",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
            },
            {
              "name": "21154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21154"
            },
            {
              "name": "tippingpoint-ips-pagefault-detection-bypass(27934)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3678",
    "datePublished": "2006-07-26T23:00:00",
    "dateReserved": "2006-07-18T00:00:00",
    "dateUpdated": "2024-08-07T18:39:53.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0362 (GCVE-0-2006-0362)

Vulnerability from cvelistv5 – Published: 2006-01-22 20:00 – Updated: 2024-08-07 16:34
VLAI?
Summary
TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://securitytracker.com/id?1015511 vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/22504 vdb-entryx_refsource_OSVDB
http://www.eweek.com/article2/0%2C1759%2C1912048%… x_refsource_CONFIRM
http://secunia.com/advisories/18515 third-party-advisoryx_refsource_SECUNIA
http://isc.sans.org/diary.php?storyid=1042 x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/16299 vdb-entryx_refsource_BID
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:34:14.697Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015511",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015511"
          },
          {
            "name": "22504",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/22504"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp"
          },
          {
            "name": "18515",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18515"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://isc.sans.org/diary.php?storyid=1042"
          },
          {
            "name": "tippingpoint-ips-http-traffic-dos(24200)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
          },
          {
            "name": "16299",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16299"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015511",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015511"
        },
        {
          "name": "22504",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/22504"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp"
        },
        {
          "name": "18515",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18515"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://isc.sans.org/diary.php?storyid=1042"
        },
        {
          "name": "tippingpoint-ips-http-traffic-dos(24200)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
        },
        {
          "name": "16299",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16299"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015511",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015511"
            },
            {
              "name": "22504",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/22504"
            },
            {
              "name": "http://www.eweek.com/article2/0,1759,1912048,00.asp",
              "refsource": "CONFIRM",
              "url": "http://www.eweek.com/article2/0,1759,1912048,00.asp"
            },
            {
              "name": "18515",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18515"
            },
            {
              "name": "http://isc.sans.org/diary.php?storyid=1042",
              "refsource": "MISC",
              "url": "http://isc.sans.org/diary.php?storyid=1042"
            },
            {
              "name": "tippingpoint-ips-http-traffic-dos(24200)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
            },
            {
              "name": "16299",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16299"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0362",
    "datePublished": "2006-01-22T20:00:00",
    "dateReserved": "2006-01-22T00:00:00",
    "dateUpdated": "2024-08-07T16:34:14.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-3711 (GCVE-0-2007-3711)

Vulnerability from nvd – Published: 2007-07-11 23:00 – Updated: 2024-08-07 14:28
VLAI?
Summary
Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.099Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
          },
          {
            "name": "24861",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24861"
          },
          {
            "name": "ADV-2007-2489",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2489"
          },
          {
            "name": "26017",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26017"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
          },
          {
            "name": "tippingpoint-fragmented-security-bypass(35343)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
          },
          {
            "name": "1018386",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018386"
          },
          {
            "name": "20070611 TippingPoint detection bypass",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
          },
          {
            "name": "35969",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/35969"
          },
          {
            "name": "20070711 TippingPoint detection bypass",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
        },
        {
          "name": "24861",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24861"
        },
        {
          "name": "ADV-2007-2489",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2489"
        },
        {
          "name": "26017",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26017"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
        },
        {
          "name": "tippingpoint-fragmented-security-bypass(35343)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
        },
        {
          "name": "1018386",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018386"
        },
        {
          "name": "20070611 TippingPoint detection bypass",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
        },
        {
          "name": "35969",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/35969"
        },
        {
          "name": "20070711 TippingPoint detection bypass",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3711",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf",
              "refsource": "MISC",
              "url": "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf"
            },
            {
              "name": "24861",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24861"
            },
            {
              "name": "ADV-2007-2489",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2489"
            },
            {
              "name": "26017",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26017"
            },
            {
              "name": "http://www.3com.com/securityalert/alerts/3COM-07-002.html",
              "refsource": "CONFIRM",
              "url": "http://www.3com.com/securityalert/alerts/3COM-07-002.html"
            },
            {
              "name": "tippingpoint-fragmented-security-bypass(35343)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35343"
            },
            {
              "name": "1018386",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018386"
            },
            {
              "name": "20070611 TippingPoint detection bypass",
              "refsource": "FULLDISC",
              "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html"
            },
            {
              "name": "35969",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/35969"
            },
            {
              "name": "20070711 TippingPoint detection bypass",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473394/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3711",
    "datePublished": "2007-07-11T23:00:00",
    "dateReserved": "2007-07-11T00:00:00",
    "dateUpdated": "2024-08-07T14:28:52.099Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-3701 (GCVE-0-2007-3701)

Vulnerability from nvd – Published: 2007-07-11 23:00 – Updated: 2024-08-07 14:28
VLAI?
Summary
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:51.991Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24855",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24855"
          },
          {
            "name": "26013",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26013"
          },
          {
            "name": "1018361",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018361"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
          },
          {
            "name": "20070710 TippingPoint IPS Signature Evasion",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
          },
          {
            "name": "ADV-2007-2490",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2490"
          },
          {
            "name": "20070710 TippingPoint IPS Signature Evasion",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
          },
          {
            "name": "tippingpoint-hex-security-byass(35336)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
          },
          {
            "name": "35970",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/35970"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode \u0027/\u0027 (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24855",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24855"
        },
        {
          "name": "26013",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26013"
        },
        {
          "name": "1018361",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018361"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
        },
        {
          "name": "20070710 TippingPoint IPS Signature Evasion",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
        },
        {
          "name": "ADV-2007-2490",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2490"
        },
        {
          "name": "20070710 TippingPoint IPS Signature Evasion",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
        },
        {
          "name": "tippingpoint-hex-security-byass(35336)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
        },
        {
          "name": "35970",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/35970"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3701",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode \u0027/\u0027 (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24855",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24855"
            },
            {
              "name": "26013",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26013"
            },
            {
              "name": "1018361",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018361"
            },
            {
              "name": "http://www.3com.com/securityalert/alerts/3COM-07-003.html",
              "refsource": "CONFIRM",
              "url": "http://www.3com.com/securityalert/alerts/3COM-07-003.html"
            },
            {
              "name": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf",
              "refsource": "MISC",
              "url": "http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf"
            },
            {
              "name": "20070710 TippingPoint IPS Signature Evasion",
              "refsource": "FULLDISC",
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html"
            },
            {
              "name": "ADV-2007-2490",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2490"
            },
            {
              "name": "20070710 TippingPoint IPS Signature Evasion",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473311/100/0/threaded"
            },
            {
              "name": "tippingpoint-hex-security-byass(35336)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35336"
            },
            {
              "name": "35970",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/35970"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3701",
    "datePublished": "2007-07-11T23:00:00",
    "dateReserved": "2007-07-11T00:00:00",
    "dateUpdated": "2024-08-07T14:28:51.991Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-3678 (GCVE-0-2006-3678)

Vulnerability from nvd – Published: 2006-07-26 23:00 – Updated: 2024-08-07 18:39
VLAI?
Summary
TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page fault), via a malformed packet.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.3com.com/securityalert/alerts/3COM-06-… x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/2956 vdb-entryx_refsource_VUPEN
http://securityreason.com/securityalert/1286 third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/19125 vdb-entryx_refsource_BID
http://securitytracker.com/id?1016562 vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/440944/100… mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/21154 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:39:53.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
          },
          {
            "name": "ADV-2006-2956",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2956"
          },
          {
            "name": "1286",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1286"
          },
          {
            "name": "19125",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19125"
          },
          {
            "name": "1016562",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016562"
          },
          {
            "name": "20060724 [CYBSEC] TippingPoint detection bypass",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
          },
          {
            "name": "21154",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21154"
          },
          {
            "name": "tippingpoint-ips-pagefault-detection-bypass(27934)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to \"force the device into layer 2 fallback (L2FB)\", causing a denial of service (page fault), via a malformed packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
        },
        {
          "name": "ADV-2006-2956",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2956"
        },
        {
          "name": "1286",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1286"
        },
        {
          "name": "19125",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19125"
        },
        {
          "name": "1016562",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016562"
        },
        {
          "name": "20060724 [CYBSEC] TippingPoint detection bypass",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
        },
        {
          "name": "21154",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21154"
        },
        {
          "name": "tippingpoint-ips-pagefault-detection-bypass(27934)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3678",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to \"force the device into layer 2 fallback (L2FB)\", causing a denial of service (page fault), via a malformed packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.3com.com/securityalert/alerts/3COM-06-003.html",
              "refsource": "CONFIRM",
              "url": "http://www.3com.com/securityalert/alerts/3COM-06-003.html"
            },
            {
              "name": "ADV-2006-2956",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2956"
            },
            {
              "name": "1286",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1286"
            },
            {
              "name": "19125",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19125"
            },
            {
              "name": "1016562",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016562"
            },
            {
              "name": "20060724 [CYBSEC] TippingPoint detection bypass",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/440944/100/0/threaded"
            },
            {
              "name": "21154",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21154"
            },
            {
              "name": "tippingpoint-ips-pagefault-detection-bypass(27934)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3678",
    "datePublished": "2006-07-26T23:00:00",
    "dateReserved": "2006-07-18T00:00:00",
    "dateUpdated": "2024-08-07T18:39:53.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0362 (GCVE-0-2006-0362)

Vulnerability from nvd – Published: 2006-01-22 20:00 – Updated: 2024-08-07 16:34
VLAI?
Summary
TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://securitytracker.com/id?1015511 vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/22504 vdb-entryx_refsource_OSVDB
http://www.eweek.com/article2/0%2C1759%2C1912048%… x_refsource_CONFIRM
http://secunia.com/advisories/18515 third-party-advisoryx_refsource_SECUNIA
http://isc.sans.org/diary.php?storyid=1042 x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/16299 vdb-entryx_refsource_BID
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:34:14.697Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015511",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015511"
          },
          {
            "name": "22504",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/22504"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp"
          },
          {
            "name": "18515",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18515"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://isc.sans.org/diary.php?storyid=1042"
          },
          {
            "name": "tippingpoint-ips-http-traffic-dos(24200)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
          },
          {
            "name": "16299",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16299"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015511",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015511"
        },
        {
          "name": "22504",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/22504"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp"
        },
        {
          "name": "18515",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18515"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://isc.sans.org/diary.php?storyid=1042"
        },
        {
          "name": "tippingpoint-ips-http-traffic-dos(24200)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
        },
        {
          "name": "16299",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16299"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015511",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015511"
            },
            {
              "name": "22504",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/22504"
            },
            {
              "name": "http://www.eweek.com/article2/0,1759,1912048,00.asp",
              "refsource": "CONFIRM",
              "url": "http://www.eweek.com/article2/0,1759,1912048,00.asp"
            },
            {
              "name": "18515",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18515"
            },
            {
              "name": "http://isc.sans.org/diary.php?storyid=1042",
              "refsource": "MISC",
              "url": "http://isc.sans.org/diary.php?storyid=1042"
            },
            {
              "name": "tippingpoint-ips-http-traffic-dos(24200)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200"
            },
            {
              "name": "16299",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16299"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0362",
    "datePublished": "2006-01-22T20:00:00",
    "dateReserved": "2006-01-22T00:00:00",
    "dateUpdated": "2024-08-07T16:34:14.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}