Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3280 State: PUBLISHED Published: 2014-06-03T01:00:00 Last Updated: 2024-08-06T10:35:57.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain potentially sensitive user information by visiting an unspecified Administration GUI web page, aka Bug IDs CSCun46045 and CSCun46116. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030306 - http://www.securityfocus.com/bid/67661 - http://tools.cisco.com/security/center/content/CiscoSec
racker.com/id/1030306 - http://www.securityfocus.com/bid/67661 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3280 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34379 - http://secunia.com/advisories/58400
CVE ID: CVE-2014-3281 State: PUBLISHED Published: 2014-06-08T16:00:00 Last Updated: 2024-08-06T10:35:57.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to obtain potentially sensitive user information by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun46071 and CSCun46101. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58657 - http://www.securityfocus.com/bid/67925 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3281
CVE ID: CVE-2014-3282 State: PUBLISHED Published: 2014-05-29T17:00:00 Last Updated: 2024-08-06T10:35:57.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive number-translation information by leveraging Location Administrator privileges and entering a crafted URL, aka Bug ID CSCum76930. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34382 - http://www.securitytracker.com/id/1030306
ferences: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34382 - http://www.securitytracker.com/id/1030306 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3282 - http://www.securityfocus.com/bid/67666 - http://secunia.com/advisories/58400
CVE ID: CVE-2014-3283 State: PUBLISHED Published: 2014-05-29T17:00:00 Last Updated: 2024-08-06T10:35:57.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCun79731. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34383 - http://www.securitytracker.com/id/1030306 - http://www.securityfocus.com/bid/67665 - http://to
ewAlert.x?alertId=34383 - http://www.securitytracker.com/id/1030306 - http://www.securityfocus.com/bid/67665 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3283 - http://secunia.com/advisories/58400
CVE ID: CVE-2014-3284 State: PUBLISHED Published: 2014-05-25T22:00:00 Last Updated: 2024-08-06T10:35:57.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030283 - http://www.securityfocus.com/bid/67603 - http://secunia.com/advisories/58405 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3284 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34346
CVE ID: CVE-2014-3285 State: PUBLISHED Published: 2014-05-29T17:00:00 Last Updated: 2024-08-06T10:35:57.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67696 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34395 - http://www.securitytracker.com/id/1030307 -
/67696 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34395 - http://www.securitytracker.com/id/1030307 - http://secunia.com/advisories/58806 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285
CVE ID: CVE-2014-3286 State: PUBLISHED Published: 2014-06-08T16:00:00 Last Updated: 2024-08-06T10:35:57.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3286 - http://www.securityfocus.com/bid/67922 - http://secunia.com/advisories/58571
CVE ID: CVE-2014-3287 State: PUBLISHED Published: 2014-06-10T10:00:00 Last Updated: 2024-08-06T10:35:57.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287 - http://www.securityfocus.com/bid/68000 - http://www.securitytracker.com/id/1030411
CVE ID: CVE-2014-3289 State: PUBLISHED Published: 2014-06-10T10:00:00 Last Updated: 2024-08-06T10:35:57.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888. Additional Analyst Notes: - CVE Program
verview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030407 - http://www.kb.cert.org/vuls/id/613308 - http://packetstormsecurity.com/files/127004/Cisco-Ironport-Email-Security-Virtual-Appliance-8.0.0-671-XSS.html - http://seclists.org/fulldisclosure/2014/Jun/57 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34569 - http://secunia.com/advisories/58296 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3289 - http://www.securityfocus.com/bid/67943
CVE ID: CVE-2014-3290 State: PUBLISHED Published: 2014-06-14T10:00:00 Last Updated: 2024-08-06T10:35:57.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030444 - http://secunia.com/advisories/58715 - http://www.securityfocus.com/bid/68021 - http://tools.cisco.com/security/center/content/C
secunia.com/advisories/58715 - http://www.securityfocus.com/bid/68021 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3290 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34613
CVE ID: CVE-2014-3291 State: PUBLISHED Published: 2014-06-08T16:00:00 Last Updated: 2024-08-06T10:35:57.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57895 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3291 - http://www.securityfocus.com/bid/67926 - http://tools.cisco.com/security/c
r/content/CiscoSecurityNotice/CVE-2014-3291 - http://www.securityfocus.com/bid/67926 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34558 - http://www.securitytracker.com/id/1030410
CVE ID: CVE-2014-3292 State: PUBLISHED Published: 2014-06-10T10:00:00 Last Updated: 2024-08-06T10:35:57.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34574 - http://www.securitytracker.com/id/1030408 - http://secunia.com/advisories/58315 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-329
- http://secunia.com/advisories/58315 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292
CVE ID: CVE-2014-3293 State: PUBLISHED Published: 2014-10-28T19:00:00 Last Updated: 2024-08-06T10:35:57.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service (BGP neighbor flapping) by sending many crafted IPv4 packets, aka Bug ID CSCuo29736. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36195 - http://www.securityfocus.com/bid/70744 - http://secunia.com/advisories/61830 - http://www.securitytracker.com/id/1031122 - http://tools.cisco.com/se
/bid/70744 - http://secunia.com/advisories/61830 - http://www.securitytracker.com/id/1031122 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97769
CVE ID: CVE-2014-3294 State: PUBLISHED Published: 2014-06-10T10:00:00 Last Updated: 2024-08-06T10:35:57.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81691. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68001 - http://www.securitytracker.com/id/1030412 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3294
CVE ID: CVE-2014-3295 State: PUBLISHED Published: 2014-06-14T01:00:00 Last Updated: 2024-08-06T10:35:57.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67983 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 - http://www.securitytracker.co
yNotice/CVE-2014-3295 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 - http://www.securitytracker.com/id/1030409 - http://secunia.com/advisories/59158
CVE ID: CVE-2014-3296 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T10:35:57.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34663 - http://secunia.com/advisories/59263 - http://www.securityfocus.com/bid/68118 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3296
CVE ID: CVE-2014-3297 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T10:35:57.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug IDs CSCui36937, CSCui37004, and CSCui36927. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59401 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34834 - http://www.secu
http://secunia.com/advisories/59401 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34834 - http://www.securityfocus.com/bid/68308 - http://secunia.com/advisories/58985 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3297 - http://www.securitytracker.com/id/1030510
CVE ID: CVE-2014-3298 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T10:35:57.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34833 - http://secunia.com/advisories/58985 - http://www.securityfocus.com/bid/68309 - ht
ity/center/viewAlert.x?alertId=34833 - http://secunia.com/advisories/58985 - http://www.securityfocus.com/bid/68309 - http://www.securitytracker.com/id/1030511
CVE ID: CVE-2014-3299 State: PUBLISHED Published: 2014-06-25T10:00:00 Last Updated: 2024-08-06T10:35:57.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68177 - http://secunia.com/advisories/59382 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3299 - http://www.securitytracker.com/id/1030473
CVE ID: CVE-2014-3300 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T10:35:57.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030515 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm - http://tools.cisco.com/security/center/viewAMB
m/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm - http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689 - http://secunia.com/advisories/59556 - http://www.securityfocus.com/bid/68331
CVE ID: CVE-2014-3301 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2024-08-06T10:35:57.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned messages, aka Bug ID CSCuj81700. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94895 - http://www.securitytracker.com/id/1030642 - http://secunia.com/advisories/60573 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3301 - http://tools.cisco.com/se
ies/60573 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3301 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35040 - http://www.securityfocus.com/bid/68894
CVE ID: CVE-2014-3302 State: PUBLISHED Published: 2014-08-01T01:00:00 Last Updated: 2024-08-06T10:35:57.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68904 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94892 - http://secunia.com/advisories/58624 - ht
ce/CVE-2014-3302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94892 - http://secunia.com/advisories/58624 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35050 - http://www.securitytracker.com/id/1030646
CVE ID: CVE-2014-3303 State: PUBLISHED Published: 2014-07-28T17:00:00 Last Updated: 2024-08-06T10:35:57.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81713. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94893 - http://www.securitytracker.com/id/1030645 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014
http://www.securitytracker.com/id/1030645 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3303 - http://www.securityfocus.com/bid/68910
CVE ID: CVE-2014-3304 State: PUBLISHED Published: 2014-07-28T17:00:00 Last Updated: 2024-08-06T10:35:57.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030641 - http://www.securityfocus.com/bid/68911 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94880
CVE ID: CVE-2014-3305 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2024-08-06T10:35:57.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94894 - http://www.securityfocus.com/bid/68903 - http://tools.cisco.com/security/center/viewAlert.x?alertId=35051 - http://tools.cisco.com/security/center/content/CiscoSe
ttp://tools.cisco.com/security/center/viewAlert.x?alertId=35051 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3305 - http://www.securitytracker.com/id/1030644
CVE ID: CVE-2014-3306 State: PUBLISHED Published: 2014-07-18T01:00:00 Last Updated: 2024-08-06T10:35:57.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030598 - http://www.securitytracker.com/id/1030599 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
CVE ID: CVE-2014-3307 State: PUBLISHED Published: 2014-07-02T10:00:00 Last Updated: 2024-08-06T10:35:57.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030509 - http://www.securityfocus.com/bid/68307 - http://secunia.com/advisories/59024 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3307
CVE ID: CVE-2014-3308 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T10:35:57.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34843 - http://www.securityfocus.com/bid/68351 - http://www.securitytracker.com/id/1030525 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308 - http://secunia.
cker.com/id/1030525 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308 - http://secunia.com/advisories/58869
CVE ID: CVE-2014-3309 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:35:57.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030549 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3309 - http://www.securityfocus.com/bid/68463 - https://exchange.xforce.ibmclou
ter/content/CiscoSecurityNotice/CVE-2014-3309 - http://www.securityfocus.com/bid/68463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94420