Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
Cisco ASA
(7.0, 7.0(5), 7.1, 7.1(2))
Cisco FWSM
(2.3, 2.3(4), 3.1, 3.1(7))
Cisco PIX
(6.3, 6.3(5)112, 7.0, 7.0(5), 7.1, 7.1(2))
Описание
Cisco PIX/ASA при использовании с Websense/N2H2 позволяют злоумышленникам, действующим удаленно, обойти ограничения HTTP-доступа, используя расщепление на отдельные пакеты GET-метода HTTP-запроса, что не позволяет отправлять запрос для проверки Websense, также известны как CSCsc67612, CSCsc68472, и CSCsd81734.
Как исправить
Используйте рекомендации производителя:
http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20060508-pix
http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20060508-pix
Ссылки
BUGTRAQ (20060508 VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices): http://www.securityfocus.com/archive/1/archive/1/433270/100/0/threaded
http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt
BID (17883): http://www.securityfocus.com/bid/17883
FRSIRT (ADV-2006-1738): http://www.frsirt.com/english/advisories/2006/1738
SECTRACK (1016039): http://securitytracker.com/id?1016039
SECTRACK (1016040): http://securitytracker.com/id?1016040
FULLDISC (20060508 VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices): http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html
OSVDB (25453): http://www.osvdb.org/25453
XF (cisco-websense-content-filtering-bypass(26308)): http://xforce.iss.net/xforce/xfdb/26308
http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt
BID (17883): http://www.securityfocus.com/bid/17883
FRSIRT (ADV-2006-1738): http://www.frsirt.com/english/advisories/2006/1738
SECTRACK (1016039): http://securitytracker.com/id?1016039
SECTRACK (1016040): http://securitytracker.com/id?1016040
FULLDISC (20060508 VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices): http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html
OSVDB (25453): http://www.osvdb.org/25453
XF (cisco-websense-content-filtering-bypass(26308)): http://xforce.iss.net/xforce/xfdb/26308
