CVE-2007-3701

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

• CWE-20

• http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html
• http://osvdb.org/35970
• http://secunia.com/advisories/26013
• http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdfExploit, Patch, Vendor Advisory
• http://www.3com.com/securityalert/alerts/3COM-07-003.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/473311/100/0/threaded
• http://www.securityfocus.com/bid/24855Exploit
• http://www.securitytracker.com/id?1018361
• http://www.vupen.com/english/advisories/2007/2490
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35336
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html
• http://osvdb.org/35970
• http://secunia.com/advisories/26013
• http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdfExploit, Patch, Vendor Advisory
• http://www.3com.com/securityalert/alerts/3COM-07-003.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/473311/100/0/threaded
• http://www.securityfocus.com/bid/24855Exploit
• http://www.securitytracker.com/id?1018361
• http://www.vupen.com/english/advisories/2007/2490
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35336

Published

Jul 11, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3695Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (…
• CVE-2007-3696CA ERwin Data Model Validator (formerly AllFusion Data Model…
• CVE-2007-3697PHP remote file inclusion vulnerability in phpbb/sendmsg.php…
• CVE-2007-3698The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6…
• CVE-2007-3699The Decomposer component in multiple Symantec products allow…
• CVE-2007-3700Sun Java System Access Manager (formerly Java System Identit…
• CVE-2007-3702Directory traversal vulnerability in the load function in cg…
• CVE-2007-3703Stack-based buffer overflow in a certain ActiveX control in …
• CVE-2007-3704Entertainment CMS allows remote attackers to bypass authenti…
• CVE-2007-3705SQL injection vulnerability in FuseTalk 2.0 allows remote at…
• CVE-2007-3706The _sanitize_globals function in CodeIgniter 1.5.3 before 2…
• CVE-2007-3707Directory traversal vulnerability in index.php in CodeIgnite…