CVE-2001-0669 json
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detectio…
published 2001-10-12 25 y ago modified 2026-06-16 4 mo ago also EUVD-2001-0655
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.4%
- EPSS 4.4% chance of exploitation in 30 days, percentile 91%
- public exploits
- 1
- Exploit-DB
Summary
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
Patch / fix
Timeline
- First public exploit (EDB-21100)
- Published
Exploit prediction
4.39% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-21100 Cisco Secure IDS 2.0/3.0 / Snort 1.x / ISS RealSecure 5/6 / NFR 5.0 - Encoded IIS Detection Evasion remote, 2001-09-05
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
cisco.com
/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml
vendor-advisory, patch
-
xforce.iss.net
/alerts/advise95.php
third-party-advisory, patch, vendor-advisory
-
kb.cert.org
/vuls/id/548515
third-party-advisory, us-government-resource
-
securityfocus.com
/bid/3292
vdb-entry
-
marc.info
/?l=bugtraq&m=99972950200602&w=2
mailing-list
Sources
- CVE List CVE-2001-0669
- NVD CVE-2001-0669
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.