Vulnslist

Cisco Web Security Appliance Malformed HTTP Response Denial of Service Vulnerability

Cisco-SA-20150909-CVE-2015-6290 · Medium · Published 10 years ago · Updated 10 years ago

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to memory management failures during processing of TCP connections. The vulnerability is due to the improper handling of a malformed HTTP server responses. An unauthenticated, remote attacker with a privileged network position could exploit the vulnerability by conducting a man-in-the-middle (MitM) attack and supplying malformed HTTP server responses to the vulnerable device. A successful exploit could allow the attacker to cause the device to improperly close TCP connections and fail to free memory resources, resulting in a partial DoS condition. Cisco has confirmed the vulnerability; however, software updates are not available. To exploit the vulnerability, the attacker would need to send crafted HTTP requests to the targeted system through the WSA web interface. Because the attacker does not need to authenticate to send the crafted HTTP requests, the likelihood of an exploit is increased.

Cisco advisory ·CSAF JSON

Workarounds

Related Products