1 results (0.003 seconds)

CVSS: 7.5EPSS: 8%CPEs: 23EXPL: 3

11 Jul 2007 — TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack. TippingPoint IPS versiones anteriores a 20070710 no maneja apropiadamente el alternativo codificado en hexadecimal de un caracter '/' (barra), lo cual podría permitir a atacantes remotos enviar determinado tráfico de red y evitar la detección, como se demuestra con un ataqu... • https://www.exploit-db.com/exploits/30287 • CWE-20: Improper Input Validation •