vulnwire
7.5high

CVE-2001-06691 exploit

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detectio…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
4.4%
percentile 91%
Public exploits
1
Exploit-DB

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.

Exploit prediction (EPSS)

4.39% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.

Exploits and detections

  • EDB-21100 Cisco Secure IDS 2.0/3.0 / Snort 1.x / ISS RealSecure 5/6 / NFR 5.0 - Encoded IIS Detection Evasion · remote · 2001-09-05

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • kb.cert.org /vuls/id/548515 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /bid/3292 · vdb-entry, x_refsource_BID, x_transferred
  • cisco.com /warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml · vendor-advisory, x_refsource_CISCO, x_transferred
  • xforce.iss.net /alerts/advise95.php · third-party-advisory, x_refsource_ISS, x_transferred
  • marc.info /?l=bugtraq&m=99972950200602&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.