CVE-2015-0770 Information

Description

CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL aka Bug ID CSCut79341.

Reference

http://tools.cisco.com/security/center/viewAlert.x?alertId=39210 http://www.securitytracker.com/id/1032511