CVE-2013-5663
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.
| Software | From | Fixed in |
|---|---|---|
| paloaltonetworks / pan-os | 4.1.0 | 4.1.0.x |
| paloaltonetworks / pan-os | 4.1.2 | 4.1.2.x |
| paloaltonetworks / pan-os | 4.1.9 | 4.1.9.x |
| paloaltonetworks / pan-os | 4.1.3 | 4.1.3.x |
| paloaltonetworks / pan-os | 4.1.6 | 4.1.6.x |
| paloaltonetworks / pan-os | 4.1.7 | 4.1.7.x |
| paloaltonetworks / pan-os | 4.0.2 | 4.0.2.x |
| paloaltonetworks / pan-os | 5.0.0-h1 | 5.0.0-h1.x |
| paloaltonetworks / pan-os | 4.1.8 | 4.1.8.x |
| paloaltonetworks / pan-os | 5.0.0 | 5.0.0.x |
| paloaltonetworks / pan-os | 4.1.4 | 4.1.4.x |
| paloaltonetworks / pan-os | 4.0.5 | 4.0.5.x |
| paloaltonetworks / pan-os | 4.1.1 | 4.1.1.x |
| paloaltonetworks / pan-os | 4.0.3 | 4.0.3.x |
| paloaltonetworks / pan-os | 4.0.0 | 4.0.0.x |
| paloaltonetworks / pan-os | 4.0.1 | 4.0.1.x |
| paloaltonetworks / pan-os | 4.0.7 | 4.0.7.x |
| paloaltonetworks / pan-os | 4.1.8-h3 | 4.1.8-h3.x |
| paloaltonetworks / pan-os | 4.1.10 | 4.1.10.x |
| paloaltonetworks / pan-os | 4.1.5 | 4.1.5.x |
| paloaltonetworks / pan-os | - | 4.0.8.x |
| paloaltonetworks / pan-os | 4.0.4 | 4.0.4.x |
| paloaltonetworks / pan-os | 4.0.6 | 4.0.6.x |
- http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20(Brad%20Woodberg%20-%20Final).pptx
- http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20%28Brad%20Woodberg%20-%20Final%29.pptx
- http://pastie.org/pastes/5568186/text
- http://researchcenter.paloaltonetworks.com/2013/01/app-id-cache-pollution-update/
- https://security.paloaltonetworks.com/CVE-2013-5663
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime