deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2877
Published: 2011-10-04
Description: Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."
CVSS Score: 6.8 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=95072; http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-2878
Published: 2011-10-04
Description: Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=95671; http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14470
CVE: CVE-2011-2879
Published: 2011-10-04
Description: Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of audio nodes, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=96150; http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14496
CVE: CVE-2011-2880
Published: 2011-10-04
Description: Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=97451; http://code.google.com/p/chromium/issues/detail?id=97520; http://code.google.com/p/chromium/issues/detail?id=97615
CVE: CVE-2011-2881
Published: 2011-10-04
Description: Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=97784; http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14075
CVE: CVE-2011-3873
Published: 2011-10-04
Description: Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=98089; http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html; http://osvdb.org/76067
CVE: CVE-2011-1221
Published: 2011-10-04
Description: Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document, a different vulnerability than CVE-2011-2947.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://service.real.com/realplayer/security/08162011_player/en/; http://service.real.com/realplayer/security/08162011_player/en/
CVE: CVE-2000-1247
Published: 2011-10-05
Description: The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI.
CVSS Score: 2.1 (LOW)
CWE: CWE-16
References: http://archive.apache.org/dist/java/java.apache.org-www.tar.gz; http://marc.info/?l=java-apache-users&m=[PII_REDACTED]7909&w=2; http://securityreason.com/securityalert/8412
CVE: CVE-2008-7300
Published: 2011-10-05
Description: The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/31412; http://sunsolve.sun.com/search/document.do?assetkey=1-26-240099-1; http://www.securityfocus.com/bid/30602
CVE: CVE-2008-7301
Published: 2011-10-05
Description: SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31049; https://exchange.xforce.ibmcloud.com/vulnerabilities/43747; http://secunia.com/advisories/31049
CVE: CVE-2008-7302
Published: 2011-10-05
Description: SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file."
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.nbill.co.uk/forum-smf/index.php/topic%2C716.0.html; http://www.nbill.co.uk/newsflash/important-security-announcement.html; http://www.nbill.co.uk/forum-smf/index.php/topic%2C716.0.html
CVE: CVE-2011-0459
Published: 2011-10-05
Description: Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN11424086/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000023; http://secunia.com/advisories/44058
CVE: CVE-2011-1076
Published: 2011-10-05
Description: net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1362fa078dae16776cd439791c6605b224ea6171; http://openwall.com/lists/oss-security/2011/03/04/13; http://securitytracker.com/id?1025162
CVE: CVE-2011-1159
Published: 2011-10-05
Description: acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.html; http://secunia.com/advisories/42947
CVE: CVE-2011-1764
Published: 2011-10-05
Description: Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670; http://bugs.exim.org/show_bug.cgi?id=1106; http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8
CVE: CVE-2011-1827
Published: 2011-10-05
Description: Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX control or (2) Java applet.
CVSS Score: 9.3 (HIGH)
References: http://www.securityfocus.com/bid/47695; http://www.vupen.com/english/advisories/2011/1162; https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk62410
CVE: CVE-2011-3982
Published: 2011-10-05
Description: The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer processing across CPUs.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94222; http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94383; http://www-01.ibm.com/support/docview.wss?uid=isg1IZ94593
CVE: CVE-2010-4853
Published: 2011-10-05
Description: SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1011-exploits/joomlaccinvoices-sql.txt; http://securityreason.com/securityalert/8413; http://www.exploit-db.com/exploits/15430
CVE: CVE-2010-4854
Published: 2011-10-05
Description: SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://bbs.wolvez.org/viewtopic.php?id=170; http://secunia.com/advisories/41732; https://exchange.xforce.ibmcloud.com/vulnerabilities/62397
CVE: CVE-2010-4855
Published: 2011-10-05
Description: SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/xweblog22-sql.txt; http://secunia.com/advisories/41708; http://securityreason.com/securityalert/8414
CVE: CVE-2010-4856
Published: 2011-10-05
Description: SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/15219; http://www.exploit-db.com/exploits/15219
CVE: CVE-2010-4857
Published: 2011-10-05
Description: SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/cagcms-sqlxss.txt; http://securityreason.com/securityalert/8415; http://www.exploit-db.com/exploits/15210
CVE: CVE-2010-4858
Published: 2011-10-05
Description: Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the showlang parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1010-exploits/dnetlivestats-lfi.txt; http://securityreason.com/securityalert/8417; http://www.exploit-db.com/exploits/15204
CVE: CVE-2010-4859
Published: 2011-10-05
Description: SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1005-exploits/webasyst-sql.txt; http://securityreason.com/securityalert/8416; http://www.securityfocus.com/bid/40349
CVE: CVE-2010-4860
Published: 2011-10-05
Description: SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/myphpauction-sql.txt; http://securityreason.com/securityalert/8418; http://www.exploit-db.com/exploits/15154
CVE: CVE-2010-4861
Published: 2011-10-05
Description: SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/webspell421-sql.txt; http://securityreason.com/securityalert/8419; http://www.exploit-db.com/exploits/15151
CVE: CVE-2010-4862
Published: 2011-10-05
Description: SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/68308; http://secunia.com/advisories/41681; http://www.exploit-db.com/exploits/15163
CVE: CVE-2010-4863
Published: 2011-10-05
Description: Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1009-exploits/getsimplecms201-xss.txt; http://securityreason.com/securityalert/8420; http://www.htbridge.ch/advisory/xss_vulnerability_in_getsimple_cms_1.html
CVE: CVE-2010-4864
Published: 2011-10-05
Description: SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cm_id parameter in an equip presenta action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/joomlaclubmanager-sql.txt; http://securityreason.com/securityalert/8421; http://www.securityfocus.com/bid/43821
CVE: CVE-2010-4865
Published: 2011-10-05
Description: SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://adv.salvatorefresta.net/JE_Guestbook_1.0_Joomla_Component_Multiple_Remote_Vulnerabilities-30092010.txt; http://osvdb.org/68283; http://secunia.com/advisories/41651
CVE: CVE-2010-4866
Published: 2011-10-05
Description: SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/chipmunkboard13-sql.txt; http://securityreason.com/securityalert/8423; http://www.exploit-db.com/exploits/15175
CVE: CVE-2010-4867
Published: 2011-10-05
Description: Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bn parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://securityreason.com/securityalert/8426; http://www.securityfocus.com/archive/1/514420/100/0/threaded; http://www.securityfocus.com/bid/44370
CVE: CVE-2010-4868
Published: 2011-10-05
Description: Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1010-exploits/wagora-lfixss.txt; http://securityreason.com/securityalert/8426; http://www.securityfocus.com/archive/1/514420/100/0/threaded
CVE: CVE-2010-4869
Published: 2011-10-05
Description: SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/15309; http://www.securityfocus.com/bid/44378; https://exchange.xforce.ibmcloud.com/vulnerabilities/62752
CVE: CVE-2011-3368
Published: 2011-10-05
Description: The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://kb.juniper.net/JSA10585; http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html
CVE: CVE-2011-3287
Published: 2011-10-06
Description: Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug ID CSCtq78106, a similar issue to CVE-2003-1564.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml
CVE: CVE-2011-3288
Published: 2011-10-06
Description: Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug IDs CSCtq89842 and CSCtq88547, a similar issue to CVE-2003-1564.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml; https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20110928-xcpcupsxml.html; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml
CVE: CVE-2011-3296
Published: 2011-10-06
Description: Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml; https://exchange.xforce.ibmcloud.com/vulnerabilities/70326; http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE: CVE-2011-3297
Published: 2011-10-06
Description: Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml; https://exchange.xforce.ibmcloud.com/vulnerabilities/70327; http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE: CVE-2011-3298
Published: 2011-10-06
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.3), 8.0 before 8.0(5.24), 8.1 before 8.1(2.50), 8.2 before 8.2(5), 8.3 before 8.3(2.18), 8.4 before 8.4(1.10), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to bypass authentication via a crafted TACACS+ reply, aka Bug IDs CSCto40365 and CSCto74274.
CVSS Score: 7.9 (HIGH)
CWE: CWE-287
References: http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml; https://exchange.xforce.ibmcloud.com/vulnerabilities/70328
CVE: CVE-2011-3299
Published: 2011-10-06
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCto92380 and CSCtq09972.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml; https://exchange.xforce.ibmcloud.com/vulnerabilities/70330
CVE: CVE-2011-3300
Published: 2011-10-06
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCtq06065 and CSCtq09978.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://osvdb.org/76087; http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE: CVE-2011-3301
Published: 2011-10-06
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCtq06062 and CSCtq09986.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://osvdb.org/76088; http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml
CVE: CVE-2011-3302
Published: 2011-10-06
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCto92398 and CSCtq09989.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://osvdb.org/76089; http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml