Description
The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.
References
- oval:org.mitre.oval:def:5858 vdb-entry signature
- cisco-ios-ips-security-bypass(32473) vdb-entry
- 1017631 vdb-entry
- 20070213 Multiple IOS IPS Vulnerabilities vendor-advisory
- 22549 vdb-entry
- http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html
- 33052 vdb-entry
- 24142 third-party-advisory
- ADV-2007-0597 vdb-entry