ByteOS Network

NVD Vulnerability Details :

CVE-2010-2629

Deferred

Source-cve@mitre.org

Published At-06 Jul, 2010 | 17:17

Updated At-11 Apr, 2025 | 00:51

The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling attacks and possibly bypass intended header insertions via crafted header data, as demonstrated by an LF character between the ClientCert-Subject and ClientCert-Subject-CN headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1576.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Cisco Systems, Inc.

>>content_services_switch_11500>>Versions up to 8.20.3.03(inclusive)

cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>content_services_switch_11500>>8.20.0.01

cpe:2.3:h:cisco:content_services_switch_11500:8.20.0.01:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>content_services_switch_11500>>08.20.1.01

cpe:2.3:h:cisco:content_services_switch_11500:08.20.1.01:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>content_services_switch_11500>>8.20.1.01

cpe:2.3:h:cisco:content_services_switch_11500:8.20.1.01:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>content_services_switch_11500>>8.20.2.01

cpe:2.3:h:cisco:content_services_switch_11500:8.20.2.01:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>ace_4710>>Versions up to a3\(2.5\)(inclusive)

cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>ace_4710>>a1\(2.0\)

cpe:2.3:h:cisco:ace_4710:a1\(2.0\):*:*:*:*:*:*:*

Cisco Systems, Inc.

>>ace_4710>>a1\(8.0\)

cpe:2.3:h:cisco:ace_4710:a1\(8.0\):*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://securitytracker.com/id?1024167	cve@mitre.org	N/A
http://securitytracker.com/id?1024168	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/512144/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/41315	cve@mitre.org	N/A
http://www.vsecurity.com/resources/advisory/20100702-1/	cve@mitre.org	N/A
http://securitytracker.com/id?1024167	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1024168	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/512144/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/41315	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vsecurity.com/resources/advisory/20100702-1/	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History