|
Cisco Firewall Services Module TCP Packet URL Filtering Bypass
|
|
Secunia Advisory:
|
SA15349
|
|
|
Release Date:
|
2005-05-12
|
|
Last Update:
|
2005-05-17
|
|
Popularity:
|
7,909 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Security Bypass
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Cisco Firewall Services Module (FWSM) 1.x
Cisco Firewall Services Module (FWSM) 2.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-1517
|
|
Description:
A security issue has been reported in Cisco Firewall Services Module (FWSM), which can result in certain traffic bypassing configured ACLs.
The security issue is caused due to an error as URL, HTTPS, and FTP filtering exceptions configured to exclude certain addresses from being filtered for e.g. outbound connections on the internal interface also causes TCP traffic matching the exception filters from not being filtered on any interface.
Successful exploitation allows TCP traffic to bypass configured ACLs meant to filter them, but requires that FWSM has been configured to allow exceptions for content filtering.
The security issue affects Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Internet Routers with a FWSM installed running version 2.3.1 or prior.
Solution:
Update to version 2.3(2).
The security issue has also been addressed in interim images 2.2(1)18 and 1.1(4)4.
Provided and/or discovered by:
Reported by vendor.
Changelog:
2005-05-17: Added CVE reference.
Original Advisory:
http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
