CVE-2007-3701
TippingPoint IPS - Signature Evasion via Hex-Encoded Unicode Slash Character
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-3701. PoCs published by Security-Assessment.com.
AI-analyzed exploit summary The exploit demonstrates a detection-bypass vulnerability in TippingPoint IPS by using Unicode characters to obfuscate malicious URIs. It provides examples of encoded paths that can bypass filtering mechanisms.
Description
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
Exploits (1)
The exploit demonstrates a detection-bypass vulnerability in TippingPoint IPS by using Unicode characters to obfuscate malicious URIs. It provides examples of encoded paths that can bypass filtering mechanisms.