PT-2010-4158 · Cisco · Cisco Content Services Switch (Css) 11500+1

Published 2010-07-06 · Updated 2018-10-10 · CVE-2010-2629

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Content Services Switch (CSS) 11500 version 8.20.4.02 Cisco Application Control Engine (ACE) 4710 version A2(3.0)

Description The issue arises from improper handling of LF header terminators in situations where the GET line is terminated by CRLF, allowing remote attackers to conduct HTTP request smuggling attacks. This could potentially bypass intended header insertions via crafted header data, such as an LF character between the ClientCert-Subject and ClientCert-Subject-CN headers.

Recommendations For Cisco Content Services Switch (CSS) 11500 version 8.20.4.02, update the software to a version that properly handles LF header terminators. For Cisco Application Control Engine (ACE) 4710 version A2(3.0), update the software to a version that correctly processes header data to prevent HTTP request smuggling attacks. As a temporary workaround, consider restricting access to crafted header data until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-2629

Affected Products

Cisco Application Control Engine (Ace) 4710

Cisco Content Services Switch (Css) 11500

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-2629 · Security Note
• http://securitytracker.com/id?1024168 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2629 · Note
• http://securitytracker.com/id?1024167 · Note
• http://securityfocus.com/archive/1/512144/100/0/threaded · Note
• http://vsecurity.com/resources/advisory/20100702-1 · Note
• http://securityfocus.com/bid/41315 · Note