CVE-2006-0515

Cisco PIX/ASA 7.1.x before 7.12 and 7.0.x before 7.05, PIX 6.3.x before 6.3.5112, and FWSM 2.3.x before 2.34 and 3.x before 3.17, when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which...

CVE-2006-0515

CVE-2006-0515 affects Cisco PIX/ASA and Websense integration. Affected: Cisco PIX/ASA versions 7.1.x before 7.1(2) and 7.0.x before 7.0(5); PIX 6.3.x before 6.3.5(112); and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7) . Root cause: handling of HTTP requests when the GET method is split across m...

CVE-2006-0515

Cisco PIX/ASA 7.1.x before 7.12 and 7.0.x before 7.05, PIX 6.3.x before 6.3.5112, and FWSM 2.3.x before 2.34 and 3.x before 3.17, when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which...

VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: WebSense content filter bypass when deployed in conjunction with Cisco filtering...

CVE-2006-0515: Undefined Security Weakness

Cisco PIX/ASA 7.1.x before 7.12 and 7.0.x before 7.05, PIX 6.3.x before 6.3.5112, and FWSM 2.3.x before 2.34 and 3.x before 3.17, when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which...

Cisco PIX / FWSM WebSense content filtering bypass

Filter doesn't catch signature in segmented packet...

VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices

Cisco Response ============== This is Cisco PSIRT's response to the statements made by George Gal in his advisory: WebSense Content Filter Bypass in conjunction with Cisco PIX in packet filter mode, posted on May 08, 2006. The original email/advisory is available at...

[Full-disclosure] Cisco PIX embryonic state machine 1b data DoS

Arhont Ltd - Information Security Arhont Advisory by: Konstantin V. Gavrilenko http://www.arhont.com http://www.hackingciscoexposed.com Arhont ref: arh200601-1 Advisory: Cisco PIX embryonic state machine 1b data DoS Class: design bug? Version: Tested on PIX535, PIX OS ver 6.34 Tested on PIX515E,...

Cisco PIX TCP connection DoS

Packets from the same hosts are blocked for few minutes if packet with invalid checksum, or with 1 byte data or of predefined TTL is received...

[Full-disclosure] Cisco PIX embryonic state machine TTL(n-1) DoS

Arhont Ltd - Information Security Arhont Advisory by: Konstantin V. Gavrilenko http://www.arhont.com http://www.hackingciscoexposed.com Arhont ref: arh200511-1 Advisory: Cisco PIX embryonic state machine TTLn-1 DoS Class: design bug? Version: Tested on PIX535, PIX OS ver 6.34 Tested on PIX515E, P...

Cisco PIX firewalls unauthorized access

Pseudo user account in a form of ACSACL-IP-uacl-xxxxxxxx is created for ACL download. It's possible to use this account for authentication...

Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability

Hi! The following is the description of the vulnerability in the Cisco implementation of downloadable ACLs, which are used by the Cisco PIX firewall authentication proxy aka cut-through proxy and VPN 3000 concentrators. When an administrator creates an ACL on the Cisco Secure Access Control Serve...

CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...

CVE-2005-4499

CVE-2005-4499 affects Cisco PIX and VPN 3000 concentrators via the Downloadable RADIUS ACLs feature. When an ACL is created on CS ACS, the system generates a random internal name that doubles as a hidden username and password, enabling a remote attacker to sniff the cleartext username from a RADI...

CVE-2005-4499: Undefined Security Weakness

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...

CVE-2005-3774

Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service blocked new connections via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including 1 SYN packets with invalid checksums, which d...

CVE-2005-3774: Undefined Security Weakness

Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service blocked new connections via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including 1 SYN packets with invalid checksums, which d...

CVE-2005-3774

CVE-2005-3774 affects Cisco PIX firewall versions 6.3 and 7.0. Remote attackers can cause a denial of service by sending spoofed TCP packets that generate embryonic connections that never complete. Details include (1) SYN packets with invalid checksums, (2) one byte of meaningless data, or (3) a ...

Cisco PIX Spoofed TCP SYN Packets Remote Denial of Service Exploit

No description provided by source. The easy way by logic [email protected] line 2 untested /str0ke hping -c 1 -S -s 31337 -k -b -p 22 10.0.xx.xxx !/usr/bin/perl eval "use Getopt::Long;";die "error Getopt::Long perl module is not installed \n" if $@; eval "use Net::RawIP;";die "error Net::RawIP pe...

Cisco PIX - Spoofed TCP SYN Packets Remote Denial of Service

The easy way by logic [email protected] line 2 untested /str0ke hping -c 1 -S -s 31337 -k -b -p 22 10.0.xx.xxx !/usr/bin/perl eval "use Getopt::Long;";die "error Getopt::Long perl module is not installed \n" if $@; eval "use Net::RawIP;";die "error Net::RawIP perl module is not installed \n" if $...