CVE-2011-4237
Summary
| CVE | CVE-2011-4237 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-05-03 10:11:00 UTC |
| Updated | 2012-06-09 03:38:00 UTC |
| Description | CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693. |
Risk And Classification
Problem Types: CWE-94
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Ciscoworks Common Services | 4.0 | All | All | All |
| Application | Cisco | Ciscoworks Common Services | 4.0 | All | All | All |
| Application | Cisco | Prime Lan Management Solution | 4.2 | All | All | All |
| Application | Cisco | Prime Lan Management Solution | 4.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Release Notes for Cisco Prime LAN Management Solution 4.2 - Cisco Systems | CONFIRM | www.cisco.com | |
| CiscoWorks Common Services HTTP Response Splitting | MISC | www.nessus.org | |
| About Secunia Research | Flexera | SECUNIA | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.