CVE-2007-0917

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-09187.1The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allowCVE-2007-09197.8Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory iCVE-2007-09207.5SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands vCVE-2007-09219.4Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URICVE-2007-09224.3Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script orCVE-2007-09237.8buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a query string composed CVE-2007-09247.5Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request CVE-2007-09254.3Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web scCVE-2007-09267.5The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modifiCVE-2007-09277.5Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce headCVE-2007-09285.0Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadCVE-2007-09295.0Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in the
CVE-2007-0917: Medium severity, CVSS 6.4 | Vulnix