Authentication flaw

Cisco PIX/ASA 7.1.x before 7.12 and 7.0.x before 7.05, PIX 6.3.x before 6.3.5112, and FWSM 2.3.x before 2.34 and 3.x before 3.17, when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which...

CVE-2006-0515

Cisco PIX/ASA 7.1.x before 7.12 and 7.0.x before 7.05, PIX 6.3.x before 6.3.5112, and FWSM 2.3.x before 2.34 and 3.x before 3.17, when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which...

CVE-2006-0515

Cisco PIX/ASA 7.1.x before 7.12 and 7.0.x before 7.05, PIX 6.3.x before 6.3.5112, and FWSM 2.3.x before 2.34 and 3.x before 3.17, when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which...

VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices

Cisco Response ============== This is Cisco PSIRT's response to the statements made by George Gal in his advisory: WebSense Content Filter Bypass in conjunction with Cisco PIX in packet filter mode, posted on May 08, 2006. The original email/advisory is available at...

Cisco PIX / FWSM WebSense content filtering bypass

Filter doesn't catch signature in segmented packet...

VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: WebSense content filter bypass when deployed in conjunction with Cisco filtering...

PT-2006-1579 · Cisco +1 · Cisco Pix +3

Name of the Vulnerable Software and Affected Versions: Cisco PIX/ASA versions 7.1.x before 7.12 Cisco PIX/ASA versions 7.0.x before 7.05 Cisco PIX version 6.3.x before 6.3.5112 Cisco FWSM versions 2.3.x before 2.34 Cisco FWSM versions 3.x before 3.17 Description: The issue allows remote attackers...

Cisco - WebSense Content Filtering Bypass

source: https://www.securityfocus.com/bid/17883/info Multiple Cisco products are susceptible to a content-filtering bypass vulnerability. This issue is due to a failure of the software to properly recognize HTTP request traffic. This issue allows users to bypass content-filtering and access...

Design/Logic Flaw

Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL...

CVE-2006-2035

Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL...

CVE-2006-2035

Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL...

CVE-2006-2035

The connected advisory confirms CVE-2006-2035 affects Websense when configured to permit the dynamic content category, enabling local users to bypass blocking of the Uncategorized category by appending a "/?" sequence to a URL. The CVSS data in the initial record indicates a low overall risk (AV:...

Websense Reporting Console Detection (HTTP)

The remote host appears to be running Websense, connections are allowed to the web reporting console. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Websense Reporting Console Detection

The remote host appears to be running Websense, and connections are allowed to the web reporting console. A remote attacker could use information gathered from this access to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18177;...

Websense Proxy Detection

Binary data 5192.prm...

Websense Enterprise 4/5 - Blocked Sites Cross-Site Scripting

source: https://www.securityfocus.com/bid/9149/info Websense Enterprise displays error pages for blocked sites without sufficiently sanitizing HTML and script code from the blocked site URI. This could allow for cross-site scripting attacks if a victim user visits a link to a blocked site that...

Websense Enterprise 45 - Blocked Sites Cross-Site Scripting

Websense Enterprise 45 - Blocked Sites Cross-Site Scripting source: https://www.securityfocus.com/bid/9149/info Websense Enterprise displays error pages for blocked sites without sufficiently sanitizing HTML and script code from the blocked site URI. This could allow for cross-site scripting...