Cisco Adaptive Security Response HTTP Response Splitting Vulnerability

Bugtraq ID:	41159
Class:	Input Validation Error
CVE:	CVE-2008-7257
Remote:	Yes
Local:	No
Published:	Jun 25 2010 12:00AM
Updated:	Jun 25 2010 12:00AM
Credit:	Daniel King of SecureWorks
Vulnerable:	Cisco PIX/ASA 8.1(1)5 Cisco PIX/ASA 8.1(1)4 Cisco PIX/ASA 8.1(1)2 Cisco PIX/ASA 8.1(1)13 Cisco PIX/ASA 8.1(1)1 Cisco PIX/ASA 8.1 Cisco PIX/ASA 8.0(4.9) Cisco PIX/ASA 8.0(4.28) Cisco PIX/ASA 8.0(4)7 Cisco PIX/ASA 8.0(4)6 Cisco PIX/ASA 8.0(4)5 Cisco PIX/ASA 8.0(4)28 Cisco PIX/ASA 8.0(4)25 Cisco PIX/ASA 8.0(4)24 Cisco PIX/ASA 8.0(4)23 Cisco PIX/ASA 8.0(4)22 Cisco PIX/ASA 8.0(4) Cisco PIX/ASA 8.0(3)9 Cisco PIX/ASA 8.0(3)15 Cisco PIX/ASA 8.0(3)14 Cisco PIX/ASA 8.0(3)10 Cisco PIX/ASA 8.0(3) Cisco PIX/ASA 8.0(2)17 Cisco PIX/ASA 8.0(2) Cisco PIX/ASA 8.0
Not Vulnerable:	Cisco PIX/ASA 8.1(2)

Cisco Adaptive Security Response HTTP Response Splitting Vulnerability

Cisco Adaptive Security Response (ASA) is prone to an HTTP response-splitting vulnerability.

Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust.

Firmware versions prior to Cisco ASA 8.1(2) are vulnerable.

This issue is being tracked by Cisco Bugid CSCsr09163.

Cisco Adaptive Security Response HTTP Response Splitting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

The following example URI and requests are available:

• /data/vulnerabilities/exploits/41159.html

Cisco Adaptive Security Response HTTP Response Splitting Vulnerability

Solution:
The vendor released an update. Please see the references for more information.

Cisco Adaptive Security Response HTTP Response Splitting Vulnerability

References:

• Cisco ASA HTTP Response Splitting Vulnerability (Daniel King, SecureWorks)
  
• Cisco ASA 5580 Release Notes Version 8.1(2) (Cisco)