CVE-2015-0733

Currently unrated

Key Information:

Vendor
Cisco
Status
Headend Digital Broadband Delivery System
Vendor
CVE Published:
30 May 2015

Summary

CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted request, aka Bug ID CSCur25580.

References

http://www.securitytracker.com/id/1032445
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/viewAlert.x?alertI...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.