Cisco PIX Firewall Software 5.1(4)
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:pix_firewall_software:5.1\(4\):*:*:*:*:*:*:*
part: o version: 5.1(4) update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Pix Firewall Software (99026fca-5865-575f-89c1-65320cd4276e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-3906 |
vulnerable | 2026-06-08 04:49:10.468048 |
Details available
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.
Published: 2006-07-27T22:00:00.000Z
Updated: 2024-08-07T18:48:39.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0515 |
vulnerable | 2026-06-08 04:48:54.219529 |
Details available
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
Published: 2006-05-09T10:00:00.000Z
Updated: 2024-08-07T16:41:28.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4499 |
vulnerable | 2026-06-08 04:48:44.053878 |
Details available
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.
Published: 2005-12-22T11:00:00.000Z
Updated: 2024-08-07T23:46:05.525Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3669 |
vulnerable | 2026-06-08 04:48:41.753117 |
Details available
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Published: 2005-11-18T21:00:00.000Z
Updated: 2024-08-07T23:17:23.435Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1003 |
vulnerable | 2026-06-08 04:47:23.112864 |
Details available
Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
Published: 2003-12-17T05:00:00.000Z
Updated: 2024-09-17T02:01:22.388Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.