Sign-up

ID

VAR-201205-0333


CVE

CVE-2011-4237


TITLE

Cisco CiscoWorks Common Services of autologin.jsp In CRLF Injection vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2012-002230

DESCRIPTION

CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust. This issue is being tracked by Cisco Bug ID CSCtu18693. ---------------------------------------------------------------------- Become a PSI 3.0 beta tester! Test-drive the new beta version and tell us what you think about its extended automatic update function and significantly enhanced user-interface. Download it here! http://secunia.com/psi_30_beta_launch ---------------------------------------------------------------------- TITLE: CiscoWorks Prime LAN Management Solution (LMS) Two Vulnerabilities SECUNIA ADVISORY ID: SA49094 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/49094/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=49094 RELEASE DATE: 2012-05-09 DISCUSS ADVISORY: http://secunia.com/advisories/49094/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/49094/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=49094 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Two vulnerabilities have been reported in CiscoWorks Prime LAN Management Solution (LMS), which can be exploited by malicious people to conduct HTTP response splitting attacks, disclose potentially sensitive information, and bypass certain security restrictions. 1) Input passed via the "URL" parameter to Autologin.jsp is not properly sanitised before being used to display HTTP headers. This can be exploited to include arbitrary HTTP headers in a response sent to the user. 2) An error exists due to a bundled version of Apache Tomcat. For more information: SA45748 The vulnerabilities are reported in versions prior to 4.2. SOLUTION: Update to version 4.2. PROVIDED AND/OR DISCOVERED BY: 1) Nessus. ORIGINAL ADVISORY: http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/release/notes/lms42rel.html http://www.nessus.org/plugins/index.php?view=single&id=58950 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2011-4237 // JVNDB: JVNDB-2012-002230 // BID: 53439 // VULHUB: VHN-52182 // PACKETSTORM: 112568

AFFECTED PRODUCTS

vendor:ciscomodel:ciscoworks common servicesscope:eqversion:4.0

Trust: 2.4

vendor:ciscomodel:prime lan management solutionscope:eqversion:4.2

Trust: 0.6

vendor:ciscomodel:lan management solutionscope:eqversion:4.0.1

Trust: 0.3

vendor:ciscomodel:lan management solutionscope:eqversion:4.0

Trust: 0.3

vendor:ciscomodel:lan management solutionscope:neversion:4.2

Trust: 0.3

sources: BID: 53439 // JVNDB: JVNDB-2012-002230 // CNNVD: CNNVD-201205-071 // NVD: CVE-2011-4237

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-4237
value: MEDIUM

Trust: 1.0

NVD: CVE-2011-4237
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201205-071
value: MEDIUM

Trust: 0.6

VULHUB: VHN-52182
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2011-4237
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-52182
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-52182 // JVNDB: JVNDB-2012-002230 // CNNVD: CNNVD-201205-071 // NVD: CVE-2011-4237

PROBLEMTYPE DATA

problemtype:CWE-94

Trust: 1.9

sources: VULHUB: VHN-52182 // JVNDB: JVNDB-2012-002230 // NVD: CVE-2011-4237

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201205-071

TYPE

code injection

Trust: 0.6

sources: CNNVD: CNNVD-201205-071

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-002230

PATCH
title:Release Notes for Cisco Prime LAN Management Solution 4.2url:http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/release/notes/lms42rel.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2012-002230

EXTERNAL IDS
db:NVDid:CVE-2011-4237
Trust: 2.8
db:SECUNIAid:49094
Trust: 1.2
db:JVNDBid:JVNDB-2012-002230
Trust: 0.8
db:CNNVDid:CNNVD-201205-071
Trust: 0.7
db:NSFOCUSid:19593
Trust: 0.6
db:BIDid:53439
Trust: 0.4
db:VULHUBid:VHN-52182
Trust: 0.1
db:PACKETSTORMid:112568
Trust: 0.1
sources:
            
            
            VULHUB: VHN-52182 // 
            
            
            
            BID: 53439 // 
            
            
            
            JVNDB: JVNDB-2012-002230 // 
            
            
            
            PACKETSTORM: 112568 // 
            
            
            
            CNNVD: CNNVD-201205-071 // 
            
            
            
            NVD: CVE-2011-4237

REFERENCES
url:http://www.cisco.com/en/us/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/release/notes/lms42rel.html
Trust: 2.1
url:http://www.nessus.org/plugins/index.php?view=single&id=58950
Trust: 2.0
url:http://secunia.com/advisories/49094
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4237
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4237
Trust: 0.8
url:http://www.nsfocus.net/vulndb/19593
Trust: 0.6
url:http://www.cisco.com/en/us/products/ps11200/index.html
Trust: 0.3
url:http://www.nessus.org/plugins/index.php?view=single&id=58950
Trust: 0.1
url:http://secunia.com/advisories/49094/#comments
Trust: 0.1
url:http://secunia.com/psi_30_beta_launch
Trust: 0.1
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=49094
Trust: 0.1
url:http://secunia.com/advisories/49094/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-52182 // 
            
            
            
            BID: 53439 // 
            
            
            
            JVNDB: JVNDB-2012-002230 // 
            
            
            
            PACKETSTORM: 112568 // 
            
            
            
            CNNVD: CNNVD-201205-071 // 
            
            
            
            NVD: CVE-2011-4237

CREDITS
Nessus
Trust: 0.3
sources:
            
            
            BID: 53439

SOURCES
db:VULHUBid:VHN-52182
db:BIDid:53439
db:JVNDBid:JVNDB-2012-002230
db:PACKETSTORMid:112568
db:CNNVDid:CNNVD-201205-071
db:NVDid:CVE-2011-4237

LAST UPDATE DATE
2025-04-11T20:51:49.558000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-52182date:2012-06-09T00:00:00
db:BIDid:53439date:2012-05-09T00:00:00
db:JVNDBid:JVNDB-2012-002230date:2012-05-08T00:00:00
db:CNNVDid:CNNVD-201205-071date:2012-05-04T00:00:00
db:NVDid:CVE-2011-4237date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-52182date:2012-05-03T00:00:00
db:BIDid:53439date:2012-05-09T00:00:00
db:JVNDBid:JVNDB-2012-002230date:2012-05-08T00:00:00
db:PACKETSTORMid:112568date:2012-05-09T07:38:11
db:CNNVDid:CNNVD-201205-071date:2012-05-04T00:00:00
db:NVDid:CVE-2011-4237date:2012-05-03T10:11:39.827