Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-1576

The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to bypass intended header insertions or conduct HTTP request smuggling attacks via crafted header data, as demonstrated by LF characters preceding ClientCert-Subject and ClientCert-Subject-CN headers, aka Bug ID CSCta04885.

Published

2010-07-06T17:17:13.233

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware cisco content_services_switch_11500 ≤ 8.20.3.03 Yes
Hardware cisco content_services_switch_11500 8.20.0.01 Yes
Hardware cisco content_services_switch_11500 08.20.1.01 Yes
Hardware cisco content_services_switch_11500 8.20.1.01 Yes
Hardware cisco content_services_switch_11500 8.20.2.01 Yes
Hardware cisco ace_4710 ≤ a3\(2.5\) Yes
Hardware cisco ace_4710 a1\(2.0\) Yes
Hardware cisco ace_4710 a1\(8.0\) Yes
References