CVE-2014-3285

Опубликовано: 29 мая 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674.

Ссылки

http://secunia.com/advisories/58806
Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34395
Vendor Advisory
http://www.securityfocus.com/bid/67696
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030307
Third Party Advisory
VDB Entry
http://secunia.com/advisories/58806
Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34395
Vendor Advisory
http://www.securityfocus.com/bid/67696
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030307
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:wide_area_application_services:*:*:*:*:*:*:*:*

Версия до 5.3\(.5a\) (включая)

cpe:2.3:a:cisco:wide_area_application_services:5.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1\(.1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1\(.1a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1\(.1b\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1\(.1c\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1\(.1d\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1\(.1e\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1\(.1f\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.2\(.1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.3\(.1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.3\(.3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.3\(.5\):*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01141

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-2m32-48rp-7qjw

github

больше 3 лет назад