PT-2014-5181 · Microsoft+1 · Sharepoint Server+1

Publicado 2014-05-29 · Atualizado 2016-09-07 · CVE-2014-3285

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services (WAAS) versions 5.3(.5a) and earlier

Description The issue is related to the improper parsing of SharePoint responses when SharePoint acceleration is enabled. This allows remote attackers to cause a denial of service by reloading the application-optimization handler via a crafted SharePoint application.

Recommendations For Cisco Wide Area Application Services (WAAS) versions 5.3(.5a) and earlier, consider disabling SharePoint acceleration as a temporary workaround until a patch is available. Restrict access to the SharePoint application to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-3285

Produtos afetados

Cisco Wide Area Application Services

Sharepoint Server

Referências · 6

• http://secunia.com/advisories/58806 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3285 · Nota de Segurança
• http://securitytracker.com/id/1030307 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34395 · Aviso do Fabricante
• http://securityfocus.com/bid/67696 · Nota