CVE-2006-4910
First published: Thu Sep 21 2006(Updated: )
The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Intrusion Detection System (IDS) Sensor Software | =4.1\(5b\) | |
| Cisco IPS Sensor Software | =5.0\(6\)p1 | |
| Cisco IPS Sensor Software | =5.1\(1\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml
- http://www.securityfocus.com/bid/20124
- http://securitytracker.com/id?1016891
- http://secunia.com/advisories/22046
- http://www.kb.cert.org/vuls/id/642076
- http://www.osvdb.org/29037
- http://www.vupen.com/english/advisories/2006/3721
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29056
Frequently Asked Questions
What is the severity of CVE-2006-4910?
CVE-2006-4910 is categorized with a high severity due to its potential to cause a denial of service.
How do I fix CVE-2006-4910?
To mitigate CVE-2006-4910, upgrade to Cisco IDS version 4.1(5c) or IPS version 5.0(6p1) or 5.1(2) and above.
Which Cisco products are affected by CVE-2006-4910?
CVE-2006-4910 affects Cisco IDS versions prior to 4.1(5c) and IPS versions prior to 5.0(6p1) and 5.1(2).
What type of attack does CVE-2006-4910 enable?
CVE-2006-4910 enables remote attackers to perform a denial of service attack by sending a crafted SSLv2 Client Hello packet.
Can CVE-2006-4910 be exploited remotely?
Yes, CVE-2006-4910 can be exploited remotely, leading to an unresponsive device.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- collector/nvd-historical
- vendor/cisco
- product/ids sensor software
- canonical/cisco ids sensor software
- product/ips sensor software
- canonical/cisco ips sensor software
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/event
- canonical/cisco intrusion detection system (ids) sensor software
- version/cisco intrusion detection system (ids) sensor software/4.1\(5b\)
- version/cisco ips sensor software/5.0\(6\)p1
- version/cisco ips sensor software/5.1\(1\)