Lucene search

[email protected]CVE-2007-3711

HistoryJul 11, 2007 - 11:30 p.m.

CVE-2007-3711

2007-07-1123:30:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2007-3711

tippingpoint ips

vulnerability

fragmented packets

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.3%

JSON

Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.

Affected configurations

NVD

Node

3comtippingpoint_ips_tosMatch2.1

3comtippingpoint_ips_tosMatch2.1.4.6324

3comtippingpoint_ips_tosMatch2.2

3comtippingpoint_ips_tosMatch2.2.1

3comtippingpoint_ips_tosMatch2.2.1.6506

3comtippingpoint_ips_tosMatch2.2.2

3comtippingpoint_ips_tosMatch2.2.3

3comtippingpoint_ips_tosMatch2.2.4

3comtippingpoint_ips_tosMatch2.5

3comtippingpoint_ips_tosMatch2.5.1

CPENameOperatorVersion
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.1
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.1.4.6324
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.2
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.2.1
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.2.1.6506
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.2.2
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.2.3
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.2.4
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.5
3com:tippingpoint_ips_tos3com tippingpoint ips toseq2.5.1

CPE	Name	Operator	Version
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.1
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.1.4.6324
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.2
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.2.1
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.2.1.6506
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.2.2
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.2.3
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.2.4
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.5
3com:tippingpoint_ips_tos	3com tippingpoint ips tos	eq	2.5.1

References

archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html

osvdb.org/35969

secunia.com/advisories/26017

www.3com.com/securityalert/alerts/3COM-07-002.html

www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf

www.securityfocus.com/archive/1/473394/100/0/threaded

www.securityfocus.com/bid/24861

www.securitytracker.com/id?1018386

www.vupen.com/english/advisories/2007/2489

exchange.xforce.ibmcloud.com/vulnerabilities/35343

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.3%

JSON

Related for CVE-2007-3711

prion1 nvd1 cvelist1