CVE-2006-4911
First published: Thu Sep 21 2006(Updated: )
Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets".
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IPS Sensor Software | >=5.0<5.0\(6p2\) | |
| Cisco IPS Sensor Software | >=5.1<5.1\(2\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml
- http://www.kb.cert.org/vuls/id/658884
- http://www.securityfocus.com/bid/20127
- http://securitytracker.com/id?1016891
- http://secunia.com/advisories/22022
- http://www.osvdb.org/29036
- http://www.vupen.com/english/advisories/2006/3721
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29058
Frequently Asked Questions
What is the severity of CVE-2006-4911?
CVE-2006-4911 has a critical severity rating as it allows remote attackers to bypass security controls.
How do I fix CVE-2006-4911?
To fix CVE-2006-4911, upgrade the Cisco IPS to version 5.0(6p2) or 5.1(2) or later.
What systems are affected by CVE-2006-4911?
CVE-2006-4911 affects Cisco IPS Sensor Software versions before 5.0(6p2) and 5.1(2).
What type of attack does CVE-2006-4911 enable?
CVE-2006-4911 enables remote attackers to bypass traffic inspection through crafted fragmented IP packets.
In what modes does CVE-2006-4911 occur?
CVE-2006-4911 occurs when Cisco IPS is running in inline or promiscuous mode.
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/nvd-historical
- vendor/cisco
- product/ips sensor software
- canonical/cisco ips sensor software
- agent/software-canonical-lookup-request
- collector/nvd-index
- version/cisco ips sensor software/5.0
- version/cisco ips sensor software/5.1