CVE-2006-0515
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 9.8%
from disclosure to weapon0 days
Published on NVDMay 9
1st PoCMay 8
exploitation probability
9.8%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/27830⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.htmlhttp://secunia.com/advisories/20044http://securitytracker.com/id?1016039http://securitytracker.com/id?1016040https://exchange.xforce.ibmcloud.com/vulnerabilities/26308http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.htmlhttp://www.osvdb.org/25453http://www.securityfocus.com/archive/1/433270/100/0/threadedhttp://www.securityfocus.com/bid/17883http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txthttp://www.vupen.com/english/advisories/2006/1738