Cisco TelePresence Integrator C Series CVE-2015-0770 HTTP Response Splitting Vulnerability
BID:75026
Info
Cisco TelePresence Integrator C Series CVE-2015-0770 HTTP Response Splitting Vulnerability
| Bugtraq ID: | 75026 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0770 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 05 2015 12:00AM |
| Updated: | Jun 05 2015 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco TelePresence TC Software 7.3.2 Cisco TelePresence TC Software 7.3.1 Cisco TelePresence TC Software 7.3 Cisco TelePresence TC Software 7.2.1 Cisco TelePresence TC Software 7.1.4 Cisco TelePresence TC Software 7.1.3 Cisco TelePresence TC Software 7.1.2 Cisco TelePresence TC Software 7.1.1 Cisco TelePresence TC Software 7.1 Cisco TelePresence TC Software 6.3.3 Cisco TelePresence TC Software 6.3.2 Cisco TelePresence TC Software 6.3.1 Cisco TelePresence TC Software 7.2 Cisco TelePresence TC Software 6.3 .0 Cisco TelePresence TC Software 6.3 |
| Not Vulnerable: |
Cisco TelePresence TC Software 6.3.4 Cisco TelePresence TC Software 8.0.0 Cisco TelePresence TC Software 7.3.3 |
Discussion
Cisco TelePresence Integrator C Series CVE-2015-0770 HTTP Response Splitting Vulnerability
Cisco TelePresence Integrator C Series are prone to an HTTP response-splitting vulnerability.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust.
This issue is being tracked by Cisco Bug ID CSCut79341.
Cisco TelePresence Integrator C Series are prone to an HTTP response-splitting vulnerability.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust.
This issue is being tracked by Cisco Bug ID CSCut79341.
Exploit / POC
Cisco TelePresence Integrator C Series CVE-2015-0770 HTTP Response Splitting Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Cisco TelePresence Integrator C Series CVE-2015-0770 HTTP Response Splitting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco TelePresence Integrator C Series CVE-2015-0770 HTTP Response Splitting Vulnerability
References:
References: