NVD

Id
59252  
Name
CVE-2006-0515  
Description
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-09  
Modified Date
2011-03-07  
Seq
2006-0515  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304577 59252 CVE-2006-0515 20060508 VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices  View
304578 59252 CVE-2006-0515 1016039  View
304579 59252 CVE-2006-0515 1016040  View
304580 59252 CVE-2006-0515 20060508 PIX/ASA/FWSM Websense/N2H2 Content Filter Bypass  View
304581 59252 CVE-2006-0515 20060508 VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices  View
304582 59252 CVE-2006-0515 17883  View
304583 59252 CVE-2006-0515 http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt  View
304584 59252 CVE-2006-0515 ADV-2006-1738  View
304585 59252 CVE-2006-0515 cisco-websense-content-filtering-bypass(26308)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58069 JVNDB-2006-000265 Cisco PIX Firewall における URL フィルタリングを回避される脆弱性 Cisco PIX Firewall には、Websense または N2H2 による URL フィルタリングを設定している場合、複数のパケットにフラグメントされた GET メソッドリクエストに対する処理が不適切であるため、URL フィルタリングを回避される脆弱性が存在します。 CVE-2006-0515 16617 CVE-2006-0515 59252 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000265.html 2006-05-08 2007-04-01 View