What’s Vulnerable › Vulnerabilities

CVE-2006-0515

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-05-09 · updated 2026-06-16

Description

Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.

Affected products

• Cisco ASA Software: 7.0, 7.0(4), 7.0.1.4, 7.0.4.3
• Cisco Firewall Services Module: 2.3, 3.1
• Cisco Pix Firewall: 6.2.2.111, 6.2.3_(110), 6.3.3_(133)
• Cisco Pix Firewall Software: 2.7, 3.0, 3.1, 4.0, 4.1(6), 4.1(6b) (+51)

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html
• http://secunia.com/advisories/20044
• http://securitytracker.com/id?1016039
• http://securitytracker.com/id?1016040
• http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html
• http://www.osvdb.org/25453
• http://www.securityfocus.com/archive/1/433270/100/0/threaded
• http://www.securityfocus.com/bid/17883
• http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt
• http://www.vupen.com/english/advisories/2006/1738
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26308
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html

Get alerted when CVE-2006-0515 or the next vulnerability affects your stack