CVE-2006-0515 Security feature bypass in n/a
Remote attackers can bypass HTTP access restrictions on Cisco firewalls integrated with Websense by splitting GET requests into multiple packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-0515?
CVE-2006-0515 is a high-severity vulnerability in Cisco Adaptive Security Appliance Software, published on 9 May 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
Which versions are affected by CVE-2006-0515?
It affects 4 products.
Products include Cisco Adaptive Security Appliance Software, Cisco Firewall Services Module, Cisco Pix Firewall, Cisco Pix Firewall Software.
How do I fix CVE-2006-0515?
No fix has been published for CVE-2006-0515 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-0515 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-0515 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Cisco Adaptive Security Appliance Software
- CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow
- CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow
- CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection
- CVE-2024-20353 Cisco ASA and FTD Denial of Service
- CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution
All Cisco Adaptive Security Appliance Software vulnerabilities
Sources
Also known as GHSA-j2r7-q5gp-wrjq.