CVE-2001-0669 Security feature bypass in n/a
Remote attackers can evade HTTP attack detection in various IDS products by using non-standard Unicode encoding in URLs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-0669?
CVE-2001-0669 is a high-severity vulnerability in n/a, published on 12 Oct 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
Which versions are affected by CVE-2001-0669?
It affects 6 products.
Products include Cisco Catalyst 6000 Intrusion Detection System Module, Cisco Secure Intrusion Detection System, Enterasys Dragon, Iss Realsecure Network Sensor, Iss Realsecure Server Sensor, Snort Snort.
How do I fix CVE-2001-0669?
No fix has been published for CVE-2001-0669 yet. Limit exposure of the affected software until one is available.
Is CVE-2001-0669 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2001-0669 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-5xc8-p2x4-cp2p.