CVE-2006-4194
First published: Thu Aug 17 2006(Updated: )
** DISPUTED ** Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco PIX | ||
| Cisco PIX | ||
| Cisco PIX Firewall | ||
| Cisco PIX Firewall | ||
| Cisco PIX | ||
| Cisco PIX | ||
| Cisco PIX Firewall | ||
| Cisco PIX Firewall | =6.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1207450,00.html
- http://www.idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away/
- http://www.networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5
- http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html
- http://www.securityfocus.com/bid/19536
- http://www.osvdb.org/29781
- http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html
Frequently Asked Questions
What is the severity of CVE-2006-4194?
The severity of CVE-2006-4194 is considered to be high due to the potential for remote exploitation.
How do I fix CVE-2006-4194?
To fix CVE-2006-4194, it is recommended to apply any relevant updates or patches provided by Cisco for affected PIX Firewall models.
What devices are affected by CVE-2006-4194?
CVE-2006-4194 affects various models of Cisco PIX 500 Series Security Appliances, including the 501, 506, 515, 520, and 525.
Can CVE-2006-4194 be exploited remotely?
Yes, CVE-2006-4194 can be exploited remotely by attackers who can send arbitrary UDP packets to intranet devices.
What kind of packets are involved in CVE-2006-4194 exploitation?
CVE-2006-4194 involves the sending of arbitrary UDP packets via unspecified vectors related to SIP fixup commands.
- agent/author
- agent/type
- agent/references
- agent/severity
- agent/weakness
- agent/status
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-historical
- status/disputed
- vendor/cisco
- canonical/cisco pix
- canonical/cisco pix firewall
- version/cisco pix firewall/6.3