Unscored severity · published May 16, 2007
CVE-2007-2690
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might…
–
CVSS
2%
EPSS
No
On KEV
Description
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Proventia A Series Xpu · Iss
through 22.10; 20.11; 22.1; 22.2; 22.3; 22.4; +2 more · source: NVD
PG
Proventia G Series Xpu · Iss
through 22.11; 22.1; 22.2; 22.3; 22.4; 22.5; +5 more · source: NVD
PM
Proventia M Series Xpu · Iss
through 1.9; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2690
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2690
www.gamasec.net
http://www.gamasec.net/english/gs07-01.html
US Government Resource
http://www.kb.cert.org/vuls/id/739224
www.securityfocus.com
http://www.securityfocus.com/archive/1/468633/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1018068
More from Proventia A Series Xpu
–
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and…
–
CVE-2004-0362
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE…
–
CVE-2004-0193
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series,…