Cisco Headend Digital Broadband Delivery System CVE-2015-0733 HTTP Response Splitting Vulnerability

Bugtraq ID:	74917
Class:	Input Validation Error
CVE:	CVE-2015-0733
Remote:	Yes
Local:	No
Published:	May 29 2015 12:00AM
Updated:	May 29 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Headend Digital Broadband Delivery System 0
Not Vulnerable:

Cisco Headend Digital Broadband Delivery System CVE-2015-0733 HTTP Response Splitting Vulnerability

Cisco Headend Digital Broadband Delivery System is prone to an HTTP response-splitting vulnerability.

Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust.

This issue is being tracked by Cisco Bug ID CSCur25580.

Cisco Headend Digital Broadband Delivery System CVE-2015-0733 HTTP Response Splitting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

Cisco Headend Digital Broadband Delivery System CVE-2015-0733 HTTP Response Splitting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].