CVE-2006-0515
Summary
| CVE | CVE-2006-0515 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-05-09 10:02:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734. |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 0.059370000 probability, percentile 0.906460000 (date 2026-04-20)
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0.1.4 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0.4.3 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(4\) | All | All | All |
| Hardware | Cisco | Firewall Services Module | 2.3 | All | All | All |
| Hardware | Cisco | Firewall Services Module | 3.1 | All | All | All |
| Application | Cisco | Pix Firewall | 6.2.2.111 | All | All | All |
| Application | Cisco | Pix Firewall | 6.2.3_\(110\) | All | All | All |
| Application | Cisco | Pix Firewall | 6.3.3_\(133\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 2.7 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 3.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 3.1 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.1\(6b\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.1\(6\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2\(5\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.3 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4\(7.202\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4\(8\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.1 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.1\(4.206\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.1\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(3.210\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(5\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(6\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(7\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(9\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(1.200\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(4.101\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1.5\(104\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(5\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(3.100\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(3.102\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(3.109\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(5\) | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco PIX/ASA/FWSM WebSense URL Filtering Bypass - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Cisco Security Response to: PIX/ASA/FWSM Websense/N2H2 Content Filter Bypass [Cisco PIX Device Manager] - Cisco Systems | af854a3a-2127-422b-91ae-364da2661108 | www.cisco.com | |
| VSR | 404 Not Found | af854a3a-2127-422b-91ae-364da2661108 | www.vsecurity.com | Patch, Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| [Full-disclosure] VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices | af854a3a-2127-422b-91ae-364da2661108 | lists.grok.org.uk | |
| www.osvdb.org/25453 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| SecurityTracker.com Archives - Cisco PIX Firewall Lets Remote Users Bypass Websense Content Filtering With Fragmented Requests | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Multiple Cisco Products WebSense Content Filtering Bypass Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Exploit |
| SecurityTracker.com Archives - Cisco Firewall Service Module (FWSM) Lets Remote Users Bypass Websense Content Filtering With Fragmented Requests | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.