Strix
26.1K

CVE-2006-0515

UnknownEPSS 8.82%

Last modified

CVE-2006-0515 is a vulnerability of currently unknown severity. Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.. EPSS estimates a 8.82% chance of exploitation in the next 30 days.

Description

Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.

Metrics

EPSS Probability
8.82%

94.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
CiscoAdaptive Security Appliance Software7.0
CiscoAdaptive Security Appliance Software7.0\(4\)
CiscoAdaptive Security Appliance Software7.0.1.4
CiscoAdaptive Security Appliance Software7.0.4.3
CiscoPix Firewall6.2.2.111
CiscoPix Firewall6.2.3_\(110\)
CiscoPix Firewall6.3.3_\(133\)
CiscoFirewall Services Module2.3
CiscoFirewall Services Module3.1
CiscoPix Firewall Software2.7
CiscoPix Firewall Software3.0
CiscoPix Firewall Software3.1
CiscoPix Firewall Software4.0
CiscoPix Firewall Software4.1\(6\)
CiscoPix Firewall Software4.1\(6b\)
CiscoPix Firewall Software4.2
CiscoPix Firewall Software4.2\(1\)
CiscoPix Firewall Software4.2\(2\)
CiscoPix Firewall Software4.2\(5\)
CiscoPix Firewall Software4.3
CiscoPix Firewall Software4.4
CiscoPix Firewall Software4.4\(4\)
CiscoPix Firewall Software4.4\(7.202\)
CiscoPix Firewall Software4.4\(8\)
CiscoPix Firewall Software5.0
CiscoPix Firewall Software5.1
CiscoPix Firewall Software5.1\(4\)
CiscoPix Firewall Software5.1\(4.206\)
CiscoPix Firewall Software5.2
CiscoPix Firewall Software5.2\(1\)
CiscoPix Firewall Software5.2\(2\)
CiscoPix Firewall Software5.2\(3.210\)
CiscoPix Firewall Software5.2\(5\)
CiscoPix Firewall Software5.2\(6\)
CiscoPix Firewall Software5.2\(7\)
CiscoPix Firewall Software5.2\(9\)
CiscoPix Firewall Software5.3
CiscoPix Firewall Software5.3\(1\)
CiscoPix Firewall Software5.3\(1.200\)
CiscoPix Firewall Software5.3\(2\)
CiscoPix Firewall Software5.3\(3\)
CiscoPix Firewall Software6.0
CiscoPix Firewall Software6.0\(1\)
CiscoPix Firewall Software6.0\(2\)
CiscoPix Firewall Software6.0\(3\)
CiscoPix Firewall Software6.0\(4\)
CiscoPix Firewall Software6.0\(4.101\)
CiscoPix Firewall Software6.1
CiscoPix Firewall Software6.1\(1\)
CiscoPix Firewall Software6.1\(2\)

Showing 50 of 66 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2006-0515?
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
How severe is CVE-2006-0515?
Severity scoring for CVE-2006-0515 is pending analysis. The EPSS model estimates a 8.82% probability of exploitation in the next 30 days.
How do I fix CVE-2006-0515?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2006

View all 2006CVEs →

Are you affected by CVE-2006-0515?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST