CVE-2006-0515
First published: Tue May 09 2006(Updated: )
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | =7.0 | |
| Cisco Adaptive Security Appliance Software | =7.0\(4\) | |
| Cisco Adaptive Security Appliance Software | =7.0.1.4 | |
| Cisco Adaptive Security Appliance Software | =7.0.4.3 | |
| Cisco PIX | =6.2.2.111 | |
| Cisco PIX | =6.2.3_\(110\) | |
| Cisco PIX | =6.3.3_\(133\) | |
| Cisco Firewall Services Module Software | =2.3 | |
| Cisco Firewall Services Module Software | =3.1 | |
| Cisco PIX | =6.1.5\(104\) | |
| Cisco PIX Firewall | =2.7 | |
| Cisco PIX Firewall | =3.0 | |
| Cisco PIX Firewall | =3.1 | |
| Cisco PIX Firewall | =4.0 | |
| Cisco PIX Firewall | =4.1\(6\) | |
| Cisco PIX Firewall | =4.1\(6b\) | |
| Cisco PIX Firewall | =4.2 | |
| Cisco PIX Firewall | =4.2\(1\) | |
| Cisco PIX Firewall | =4.2\(2\) | |
| Cisco PIX Firewall | =4.2\(5\) | |
| Cisco PIX Firewall | =4.3 | |
| Cisco PIX Firewall | =4.4 | |
| Cisco PIX Firewall | =4.4\(4\) | |
| Cisco PIX Firewall | =4.4\(7.202\) | |
| Cisco PIX Firewall | =4.4\(8\) | |
| Cisco PIX Firewall | =5.0 | |
| Cisco PIX Firewall | =5.1 | |
| Cisco PIX Firewall | =5.1\(4\) | |
| Cisco PIX Firewall | =5.1\(4.206\) | |
| Cisco PIX Firewall | =5.2 | |
| Cisco PIX Firewall | =5.2\(1\) | |
| Cisco PIX Firewall | =5.2\(2\) | |
| Cisco PIX Firewall | =5.2\(3.210\) | |
| Cisco PIX Firewall | =5.2\(5\) | |
| Cisco PIX Firewall | =5.2\(6\) | |
| Cisco PIX Firewall | =5.2\(7\) | |
| Cisco PIX Firewall | =5.2\(9\) | |
| Cisco PIX Firewall | =5.3 | |
| Cisco PIX Firewall | =5.3\(1\) | |
| Cisco PIX Firewall | =5.3\(1.200\) | |
| Cisco PIX Firewall | =5.3\(2\) | |
| Cisco PIX Firewall | =5.3\(3\) | |
| Cisco PIX Firewall | =6.0 | |
| Cisco PIX Firewall | =6.0\(1\) | |
| Cisco PIX Firewall | =6.0\(2\) | |
| Cisco PIX Firewall | =6.0\(3\) | |
| Cisco PIX Firewall | =6.0\(4\) | |
| Cisco PIX Firewall | =6.0\(4.101\) | |
| Cisco PIX Firewall | =6.1 | |
| Cisco PIX Firewall | =6.1\(1\) | |
| Cisco PIX Firewall | =6.1\(2\) | |
| Cisco PIX Firewall | =6.1\(3\) | |
| Cisco PIX Firewall | =6.1\(4\) | |
| Cisco PIX Firewall | =6.1\(5\) | |
| Cisco PIX Firewall | =6.2 | |
| Cisco PIX Firewall | =6.2\(1\) | |
| Cisco PIX Firewall | =6.2\(2\) | |
| Cisco PIX Firewall | =6.2\(3\) | |
| Cisco PIX Firewall | =6.2\(3.100\) | |
| Cisco PIX Firewall | =6.3 | |
| Cisco PIX Firewall | =6.3\(1\) | |
| Cisco PIX Firewall | =6.3\(2\) | |
| Cisco PIX Firewall | =6.3\(3\) | |
| Cisco PIX Firewall | =6.3\(3.102\) | |
| Cisco PIX Firewall | =6.3\(3.109\) | |
| Cisco PIX Firewall | =6.3\(5\) | |
| All of | ||
| Any of | ||
| Cisco Adaptive Security Appliance Software | =7.0 | |
| Cisco Adaptive Security Appliance Software | =7.0\(4\) | |
| Cisco Adaptive Security Appliance Software | =7.0.1.4 | |
| Cisco Adaptive Security Appliance Software | =7.0.4.3 | |
| Any of | ||
| Cisco PIX | =6.2.2.111 | |
| Cisco PIX | =6.2.3_\(110\) | |
| Cisco PIX | =6.3.3_\(133\) | |
| Cisco Firewall Services Module Software | =2.3 | |
| Cisco Firewall Services Module Software | =3.1 | |
| Cisco PIX Firewall | =2.7 | |
| Cisco PIX Firewall | =3.0 | |
| Cisco PIX Firewall | =3.1 | |
| Cisco PIX Firewall | =4.0 | |
| Cisco PIX Firewall | =4.1\(6\) | |
| Cisco PIX Firewall | =4.1\(6b\) | |
| Cisco PIX Firewall | =4.2 | |
| Cisco PIX Firewall | =4.2\(1\) | |
| Cisco PIX Firewall | =4.2\(2\) | |
| Cisco PIX Firewall | =4.2\(5\) | |
| Cisco PIX Firewall | =4.3 | |
| Cisco PIX Firewall | =4.4 | |
| Cisco PIX Firewall | =4.4\(4\) | |
| Cisco PIX Firewall | =4.4\(7.202\) | |
| Cisco PIX Firewall | =4.4\(8\) | |
| Cisco PIX Firewall | =5.0 | |
| Cisco PIX Firewall | =5.1 | |
| Cisco PIX Firewall | =5.1\(4\) | |
| Cisco PIX Firewall | =5.1\(4.206\) | |
| Cisco PIX Firewall | =5.2 | |
| Cisco PIX Firewall | =5.2\(1\) | |
| Cisco PIX Firewall | =5.2\(2\) | |
| Cisco PIX Firewall | =5.2\(3.210\) | |
| Cisco PIX Firewall | =5.2\(5\) | |
| Cisco PIX Firewall | =5.2\(6\) | |
| Cisco PIX Firewall | =5.2\(7\) | |
| Cisco PIX Firewall | =5.2\(9\) | |
| Cisco PIX Firewall | =5.3 | |
| Cisco PIX Firewall | =5.3\(1\) | |
| Cisco PIX Firewall | =5.3\(1.200\) | |
| Cisco PIX Firewall | =5.3\(2\) | |
| Cisco PIX Firewall | =5.3\(3\) | |
| Cisco PIX Firewall | =6.0 | |
| Cisco PIX Firewall | =6.0\(1\) | |
| Cisco PIX Firewall | =6.0\(2\) | |
| Cisco PIX Firewall | =6.0\(3\) | |
| Cisco PIX Firewall | =6.0\(4\) | |
| Cisco PIX Firewall | =6.0\(4.101\) | |
| Cisco PIX Firewall | =6.1 | |
| Cisco PIX Firewall | =6.1\(1\) | |
| Cisco PIX Firewall | =6.1\(2\) | |
| Cisco PIX Firewall | =6.1\(3\) | |
| Cisco PIX Firewall | =6.1\(4\) | |
| Cisco PIX Firewall | =6.1\(5\) | |
| Cisco PIX Firewall | =6.1.5\(104\) | |
| Cisco PIX Firewall | =6.2 | |
| Cisco PIX Firewall | =6.2\(1\) | |
| Cisco PIX Firewall | =6.2\(2\) | |
| Cisco PIX Firewall | =6.2\(3\) | |
| Cisco PIX Firewall | =6.2\(3.100\) | |
| Cisco PIX Firewall | =6.3 | |
| Cisco PIX Firewall | =6.3\(1\) | |
| Cisco PIX Firewall | =6.3\(2\) | |
| Cisco PIX Firewall | =6.3\(3\) | |
| Cisco PIX Firewall | =6.3\(3.102\) | |
| Cisco PIX Firewall | =6.3\(3.109\) | |
| Cisco PIX Firewall | =6.3\(5\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt
- http://www.securityfocus.com/bid/17883
- http://securitytracker.com/id?1016039
- http://securitytracker.com/id?1016040
- http://secunia.com/advisories/20044
- http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html
- http://www.osvdb.org/25453
- http://www.vupen.com/english/advisories/2006/1738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26308
- http://www.securityfocus.com/archive/1/433270/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-0515?
CVE-2006-0515 has a medium severity rating, allowing unauthorized users to bypass HTTP access restrictions.
How do I fix CVE-2006-0515?
To fix CVE-2006-0515, upgrade to Cisco PIX/ASA version 7.1(2) or newer, or apply the appropriate patches provided by Cisco.
Which products are affected by CVE-2006-0515?
CVE-2006-0515 affects Cisco PIX and ASA devices running various versions of the software including 6.3.x and 7.0.x.
Can CVE-2006-0515 lead to data breaches?
Yes, CVE-2006-0515 allows attackers to bypass web access controls, potentially leading to data breaches.
Is CVE-2006-0515 still a risk today?
While CVE-2006-0515 was reported in 2006, any affected systems that haven't been updated remain at risk today.
- collector/nvd-historical
- agent/type
- agent/severity
- agent/remedy
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- vendor/cisco
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/7.0
- version/cisco adaptive security appliance software/7.0\(4\)
- version/cisco adaptive security appliance software/7.0.1.4
- version/cisco adaptive security appliance software/7.0.4.3
- canonical/cisco pix
- version/cisco pix/6.2.2.111
- version/cisco pix/6.2.3_\(110\)
- version/cisco pix/6.3.3_\(133\)
- canonical/cisco firewall services module software
- version/cisco firewall services module software/2.3
- version/cisco firewall services module software/3.1
- version/cisco pix/6.1.5\(104\)
- canonical/cisco pix firewall
- version/cisco pix firewall/2.7
- version/cisco pix firewall/3.0
- version/cisco pix firewall/3.1
- version/cisco pix firewall/4.0
- version/cisco pix firewall/4.1\(6\)
- version/cisco pix firewall/4.1\(6b\)
- version/cisco pix firewall/4.2
- version/cisco pix firewall/4.2\(1\)
- version/cisco pix firewall/4.2\(2\)
- version/cisco pix firewall/4.2\(5\)
- version/cisco pix firewall/4.3
- version/cisco pix firewall/4.4
- version/cisco pix firewall/4.4\(4\)
- version/cisco pix firewall/4.4\(7.202\)
- version/cisco pix firewall/4.4\(8\)
- version/cisco pix firewall/5.0
- version/cisco pix firewall/5.1
- version/cisco pix firewall/5.1\(4\)
- version/cisco pix firewall/5.1\(4.206\)
- version/cisco pix firewall/5.2
- version/cisco pix firewall/5.2\(1\)
- version/cisco pix firewall/5.2\(2\)
- version/cisco pix firewall/5.2\(3.210\)
- version/cisco pix firewall/5.2\(5\)
- version/cisco pix firewall/5.2\(6\)
- version/cisco pix firewall/5.2\(7\)
- version/cisco pix firewall/5.2\(9\)
- version/cisco pix firewall/5.3
- version/cisco pix firewall/5.3\(1\)
- version/cisco pix firewall/5.3\(1.200\)
- version/cisco pix firewall/5.3\(2\)
- version/cisco pix firewall/5.3\(3\)
- version/cisco pix firewall/6.0
- version/cisco pix firewall/6.0\(1\)
- version/cisco pix firewall/6.0\(2\)
- version/cisco pix firewall/6.0\(3\)
- version/cisco pix firewall/6.0\(4\)
- version/cisco pix firewall/6.0\(4.101\)
- version/cisco pix firewall/6.1
- version/cisco pix firewall/6.1\(1\)
- version/cisco pix firewall/6.1\(2\)
- version/cisco pix firewall/6.1\(3\)
- version/cisco pix firewall/6.1\(4\)
- version/cisco pix firewall/6.1\(5\)
- version/cisco pix firewall/6.2
- version/cisco pix firewall/6.2\(1\)
- version/cisco pix firewall/6.2\(2\)
- version/cisco pix firewall/6.2\(3\)
- version/cisco pix firewall/6.2\(3.100\)
- version/cisco pix firewall/6.3
- version/cisco pix firewall/6.3\(1\)
- version/cisco pix firewall/6.3\(2\)
- version/cisco pix firewall/6.3\(3\)
- version/cisco pix firewall/6.3\(3.102\)
- version/cisco pix firewall/6.3\(3.109\)
- version/cisco pix firewall/6.3\(5\)
- version/cisco pix firewall/6.1.5\(104\)