PT-2006-5663 · Cisco · Cisco Ips

Pratap Ramamurthy + 1 · Published 2006-09-21 · Updated 2019-07-31 · CVE-2006-4911

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco IPS versions 5.0 before 5.0(6p2) Cisco IPS versions 5.1 before 5.1(2)

Description The issue allows remote attackers to bypass traffic inspection by sending a crafted sequence of fragmented IP packets when the system is running in inline or promiscuous mode.

Recommendations For Cisco IPS version 5.0, update to version 5.0(6p2) or later. For Cisco IPS version 5.1, update to version 5.1(2) or later.

Fix

Related Identifiers

CVE-2006-4911

Affected Products

Cisco Ips

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-4911 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml · Vendor Advisory
• http://secunia.com/advisories/22022 · Note
• http://securitytracker.com/id?1016891 · Note
• http://kb.cert.org/vuls/id/658884 · Note
• http://osvdb.org/29036 · Note
• http://vupen.com/english/advisories/2006/3721 · Note
• http://securityfocus.com/bid/20127 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29058 · Note