OSSA 2012-012 specifies wrong CVE id

The original advisory specified an incorrect CVE identifier
https://lists.launchpad.net/openstack/msg16278.html

The correct CVE is CVE-2012-3540

Fixes issue #3