CVE-2006-0515

Related Files

cisco-websense-bypass.txt

Posted May 17, 2006

Authored by George D. Gal

For each HTTP request the Cisco PIX or other Cisco device forwards individual packets to Websense to determine whether or not the request should be permitted. However, when splitting the HTTP request into two or more packets on the HTTP method it is possible to circumvent the filtering mechanism. Affected versions are Websense 5.5.2, Cisco PIX OS / ASA versions below 7.0.4.12, Cisco PIX OS versions below 6.3.6(112), FWSM 2.3.x, and FWSM 3.x.

tags | advisory, web

systems | cisco

advisories | CVE-2006-0515

SHA-256 | 8aeae261f2d8b33cb7f16363b89f38beceb4080fce9a0d8b8fc55851a9705816

Download | Favorite | View