HTTP Access Restriction Bypass in Cisco PIX/ASA and FWSM Products

CVE-2006-0515

Summary

Cisco PIX/ASA and FWSM products face a vulnerability where remote attackers can circumvent HTTP access restrictions when used alongside Websense/N2H2. By manipulating the GET method of an HTTP request into multiple packets, the request may avoid inspection by Websense, thereby bypassing security filters designed to monitor and restrict web traffic. This presents significant risks for organizations relying on these devices for network security, allowing potentially malicious content to pass through unchecked.

References