ID de Prueba:	1.3.6.1.4.1.25623.1.0.106278
Categoría:	CISCO
Título:	Cisco IOS Software Cisco Application-Hosting Framework HTTP Header Injection Vulnerability
Resumen:	A vulnerability in the Cisco Application-hosting Framework (CAF) component;for Cisco IOS Software with the IOx feature set could allow an unauthenticated, remote attacker to cause a CAF;user to download a file controlled by the attacker.
Descripción:	Summary: A vulnerability in the Cisco Application-hosting Framework (CAF) component for Cisco IOS Software with the IOx feature set could allow an unauthenticated, remote attacker to cause a CAF user to download a file controlled by the attacker. Vulnerability Insight: The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting crafted HTTP headers into the communication path between the user and CAF. Vulnerability Impact: An exploit could allow the attacker to force the user to download a file controlled by the attacker. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6412 BugTraq ID: 93088 http://www.securityfocus.com/bid/93088 Cisco Security Advisory: 20160921 Cisco Application-Hosting Framework HTTP Header Injection Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf1 http://www.securitytracker.com/id/1036874
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.