Vulnerability CVE-2017-5660

Vulnerability Name:

CVE-2017-5660 (CCN-139609)

Assigned:

2017-01-29

Published:

2018-02-27

Updated:

2018-03-21

Summary:

There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.

CVSS v3 Severity:

8.6 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)
7.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): None Integrity (I): High Availibility (A): None

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2017-5660

Source: CCN
Type: oss-sec Mailing List, Tue, 27 Feb 2018 09:38:23 -0800
Apache Traffic Server host header and line folding - CVE-2017-5660

Source: CCN
Type: Apache Web site
Traffic Server

Source: XF
Type: UNKNOWN
apache-traffic-cve20175660-weak-sec(139609)

Source: MLIST
Type: Vendor Advisory
[dev] 20180227 [ANNOUNCE] Apache Traffic Server host header and line folding - CVE-2017-5660

Source: DEBIAN
Type: Third Party Advisory
DSA-4128

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2017-5660

Vulnerable Configuration:

Configuration 1:

cpe:/a:apache:traffic_server:*:*:*:*:*:*:*:* (Version <= 6.2.0)

OR cpe:/a:apache:traffic_server:6.2.1:*:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:6.2.1:rc0:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:6.2.2:*:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:6.2.2:rc0:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:7.0.0:*:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:7.0.0:rc0:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:7.0.0:rc1:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:7.0.0:rc2:*:*:*:*:*:*

Configuration 2:

cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:apache:traffic_server:6.2.0:*:*:*:*:*:*:*

OR cpe:/a:apache:traffic_server:7.0.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.ubuntu.xenial:def:201756600000000	V	CVE-2017-5660 on Ubuntu 16.04 LTS (xenial) - low.	2018-02-27
oval:com.ubuntu.artful:def:20175660000	V	CVE-2017-5660 on Ubuntu 17.10 (artful) - untriaged.	2018-02-27
oval:com.ubuntu.xenial:def:20175660000	V	CVE-2017-5660 on Ubuntu 16.04 LTS (xenial) - untriaged.	2018-02-27
oval:com.ubuntu.disco:def:201756600000000	V	CVE-2017-5660 on Ubuntu 19.04 (disco) - low.	2018-02-27
oval:com.ubuntu.bionic:def:20175660000	V	CVE-2017-5660 on Ubuntu 18.04 LTS (bionic) - untriaged.	2018-02-27
oval:com.ubuntu.cosmic:def:201756600000000	V	CVE-2017-5660 on Ubuntu 18.10 (cosmic) - low.	2018-02-27
oval:com.ubuntu.cosmic:def:20175660000	V	CVE-2017-5660 on Ubuntu 18.10 (cosmic) - untriaged.	2018-02-27
oval:com.ubuntu.bionic:def:201756600000000	V	CVE-2017-5660 on Ubuntu 18.04 LTS (bionic) - low.	2018-02-27
oval:com.ubuntu.trusty:def:20175660000	V	CVE-2017-5660 on Ubuntu 14.04 LTS (trusty) - untriaged.	2018-02-27

BACK