CNCVE编号：CNCVE-20010669 CVE编号：CAN-2001-0669 安全级别：高 漏洞中文描述： 各种入侵检测系统如：Cisco Secure入侵检测系统、 Cisco Catalyst 6000 I入侵检测系统模块、Dragon Sensor 4.x、 Snort before 1.8.1、 ISS RealSecure Network Sensor 5.x和6.x在XPU 3.2以前的版本以及ISS RealSecure Server Sensor 5.5和6.0Windows版允许远程攻击者通过在请求的URL的ASCII码中插入不标准的“%u”Unicode编码来逃避HTTP攻击检测。 漏洞英文描述： Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2 allow remote attackers bypassing HTTP attack detection through inserting malformed "%u" unicode into requested URL. 漏洞参考： Reference: BUGTRAQ:20010905 %u encoding IDS bypass vulnerability Reference: URL:http://marc.theaimsgroup.com/?l=bugtraq&m=99972950200602&w=2 Reference: ISS:20010905 Multiple Vendor IDS Unicode Bypass Vulnerability Reference: URL:http://xforce.iss.n 系统类型： Unix/Linux Win95/98/ME Win2000/NT 其他 漏洞类型：输入有效性检查错误