Unscored severity · published Oct 30, 2001
CVE-2001-0669
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x,…
–
CVSS
4.4%
EPSS
No
On KEV
Description
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C6
Catalyst 6000 Intrusion Detection System Module · Cisco
All versions, or not specified · source: NVD
DR
Dragon · Enterasys
4.x · source: NVD
RN
Realsecure Network Sensor · Iss
5.x; 6.x · source: NVD
RS
Realsecure Server Sensor · Iss
5.5; 6.0 · source: NVD
SI
Secure Intrusion Detection System · Cisco
All versions, or not specified · source: NVD
SN
Snort · Snort
1.8.1 · source: NVD
Affected product
C6
Catalyst 6000 Intrusion Detection System Module
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0669
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0669
marc.info
http://marc.info/?l=bugtraq&m=99972950200602&w=2
Patch
http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml
US Government Resource
http://www.kb.cert.org/vuls/id/548515
www.securityfocus.com
http://www.securityfocus.com/bid/3292
Patch
http://xforce.iss.net/alerts/advise95.php