CVEvulnerability
CVE-2006-0515
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-05-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
Affected configurations
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.4.3
• cisco pix firewall 6.2.2.111
• cisco pix firewall 6.2.3 \(110\)
• cisco pix firewall 6.3.3 \(133\)
• cisco firewall services module 2.3
• cisco firewall services module 3.1
• cisco pix firewall software 2.7
• cisco pix firewall software 3.0
• cisco pix firewall software 3.1
• cisco pix firewall software 4.0
• cisco pix firewall software 4.1\(6\)
• cisco pix firewall software 4.1\(6b\)
• cisco pix firewall software 4.2
• cisco pix firewall software 4.2\(1\)
• cisco pix firewall software 4.2\(2\)
• cisco pix firewall software 4.2\(5\)
• cisco pix firewall software 4.3
• cisco pix firewall software 4.4
• cisco pix firewall software 4.4\(4\)
• cisco pix firewall software 4.4\(7.202\)
• cisco pix firewall software 4.4\(8\)
• cisco pix firewall software 5.0
• cisco pix firewall software 5.1
• cisco pix firewall software 5.1\(4\)
• cisco pix firewall software 5.1\(4.206\)
• cisco pix firewall software 5.2
• cisco pix firewall software 5.2\(1\)
• cisco pix firewall software 5.2\(2\)
• cisco pix firewall software 5.2\(3.210\)
• cisco pix firewall software 5.2\(5\)
• cisco pix firewall software 5.2\(6\)
• cisco pix firewall software 5.2\(7\)
• cisco pix firewall software 5.2\(9\)
• cisco pix firewall software 5.3
• cisco pix firewall software 5.3\(1\)
• cisco pix firewall software 5.3\(1.200\)
• cisco pix firewall software 5.3\(2\)
• cisco pix firewall software 5.3\(3\)
• cisco pix firewall software 6.0
• cisco pix firewall software 6.0\(1\)
• cisco pix firewall software 6.0\(2\)
• cisco pix firewall software 6.0\(3\)
• cisco pix firewall software 6.0\(4\)
• cisco pix firewall software 6.0\(4.101\)
• cisco pix firewall software 6.1
• cisco pix firewall software 6.1\(1\)
• cisco pix firewall software 6.1\(2\)
• cisco pix firewall software 6.1\(3\)
• cisco pix firewall software 6.1\(4\)
• cisco pix firewall software 6.1\(5\)
• cisco pix firewall software 6.1.5\(104\)
• cisco pix firewall software 6.2
• cisco pix firewall software 6.2\(1\)
• cisco pix firewall software 6.2\(2\)
• cisco pix firewall software 6.2\(3\)
• cisco pix firewall software 6.2\(3.100\)
• cisco pix firewall software 6.3
… and 6 more
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html lists.grok.org.uk
- http://secunia.com/advisories/20044 secunia.com
- http://securitytracker.com/id?1016039 securitytracker.com
- http://securitytracker.com/id?1016040 securitytracker.com
- http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html www.cisco.com
- http://www.osvdb.org/25453 www.osvdb.org
- http://www.securityfocus.com/archive/1/433270/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17883 Exploit
- http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1738 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26308 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html lists.grok.org.uk
- http://secunia.com/advisories/20044 secunia.com
- http://securitytracker.com/id?1016039 securitytracker.com
- http://securitytracker.com/id?1016040 securitytracker.com
- http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html www.cisco.com
- http://www.osvdb.org/25453 www.osvdb.org
- http://www.securityfocus.com/archive/1/433270/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17883 Exploit
- http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1738 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26308 exchange.xforce.ibmcloud.com