CVE-2006-4194

Description

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue

Affected products

• Cisco / pix_firewall_501
• Cisco / pix_firewall_506
• Cisco / pix_firewall_515
• Cisco / pix_firewall_515e
• Cisco / pix_firewall_520
• Cisco / pix_firewall_525
• Cisco / pix_firewall_535
• Cisco / pix_firewall_software6.3 – 6.3

References

• MISChttp://www.securityfocus.com/bid/19536
• MISChttp://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html
• MISChttp://www.osvdb.org/29781
• MISChttp://www.idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away/
• MISChttp://www.networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5
• VENDOR_ADVISORYhttp://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html