Unscored severity · published Sep 21, 2006
CVE-2006-4911
Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets".
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Ips Sensor Software · Cisco
5.0 before 5.0\(6p2\); 5.1 before 5.1\(2\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4911
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4911
Third Party Advisory
http://secunia.com/advisories/22022
Third Party Advisory
http://securitytracker.com/id?1016891
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml
Third Party Advisory
http://www.kb.cert.org/vuls/id/658884
Broken Link
http://www.osvdb.org/29036
Third Party Advisory
http://www.securityfocus.com/bid/20127
More from Ips Sensor Software
–
CVE-2015-0631
Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many…
–
CVE-2014-0720
Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames,…
–
CVE-2014-0719
The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process…
–
CVE-2014-0718
The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process…
–
CVE-2007-2688
The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might…