high7.5Public exploit code

CVE-2006-0515

Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Webs…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Cisco - WebSense Content Filtering Bypass2006-05-08 · remote · hardware · Verified

Impact

Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.

Affected products

Vendor	Product	Affected versions
Cisco	Adaptive Security Appliance Software	Versions 7.0, 7.0\(4\), 7.0.1.4, 7.0.4.3
Cisco	Pix Firewall	Versions 6.2.2.111, 6.2.3_\(110\), 6.3.3_\(133\)
Cisco	Firewall Services Module	Versions 2.3, 3.1
Cisco	Pix Firewall Software	Versions 2.7, 3.0, 3.1, 4.0, 4.1\(6\), 4.1\(6b\)

Public exploit code

Impact

Affected products

References