A vulnerability has been reported in Cisco Intrusion Prevention System, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to insufficient inspection of fragmented IP packets. This can be exploited to bypass the Intrusion Prevention System to e.g. access internal systems by sending specially crafted IP packets.

The vulnerability affects the following products:
- Cisco IPS 5.0(x) software prior to 5.0(6p2)
- Cisco IPS 5.1(x) software prior to 5.1(2)

Solution
Apply updated software.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers