rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-0272 
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-19T10:00:00.000Z
CVE-2012-0273 
Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session_id cookie in a request to the get_cookie_value function in response.c, (2) directory name in a request to the add_default_file function in response.c, or (3) file name in a request to the retrieve_physical_file_name_or_brows function in response.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-20T14:00:00.000Z
CVE-2012-0275 
Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-04T10:00:00.000Z
CVE-2012-0276 
Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T21:00:00.000Z
CVE-2012-0277 
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T21:00:00.000Z
CVE-2012-0278 
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-18T10:00:00.000Z
CVE-2012-0279 
Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-01T23:00:00.000Z
CVE-2012-0282 
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T21:00:00.000Z
CVE-2012-0283 
Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-13T21:00:00.000Z
CVE-2012-0284 
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the sURL argument).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-19T15:00:00.000Z
CVE-2012-0285 
Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T15:00:00.000Z
CVE-2012-0286 
Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T15:00:00.000Z
CVE-2012-0287 
Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-06T02:00:00.000Z
CVE-2012-0289 
Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-23T21:00:00.000Z
CVE-2012-0290 
Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-06T20:00:00.000Z
CVE-2012-0291 
Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-22T11:00:00.000Z
CVE-2012-0292 
The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-08T02:00:00.000Z
CVE-2012-0293 
Multiple SQL injection vulnerabilities in Symantec Altiris WISE Package Studio before 8.0MR1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-17T10:00:00.000Z
CVE-2012-0294 
Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-23T21:00:00.000Z
CVE-2012-0295 
The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-23T21:00:00.000Z
CVE-2012-0296 
Multiple cross-site scripting (XSS) vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-0297 
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-0298 
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-0299 
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-0300 
Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which allows remote attackers to obtain potentially sensitive version information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-05T17:00:00.000Z
CVE-2012-0301 
Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-05T17:00:00.000Z
CVE-2012-0302 
Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-05T17:00:00.000Z
CVE-2012-0303 
Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) execute application commands or (2) create admin accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-05T17:00:00.000Z
CVE-2012-0304 
Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-22T10:00:00.000Z
CVE-2012-0305 
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-23T17:00:00.000Z
CVE-2012-0306 
Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted backup file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-10-18T17:00:00.000Z
CVE-2012-0307 
Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway (SMG) before 10.0 allow remote attackers to inject arbitrary web script or HTML via (1) web content or (2) e-mail content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-29T10:00:00.000Z
CVE-2012-0308 
Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authentication of administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-29T10:00:00.000Z
CVE-2012-0309 
Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-13T02:00:00.000Z
CVE-2012-0310 
CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-13T02:00:00.000Z
CVE-2012-0311 
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-26T15:00:00.000Z
CVE-2012-0312 
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-26T15:00:00.000Z
CVE-2012-0313 
Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T02:00:00.000Z
CVE-2012-0314 
Multiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02) router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-03T02:00:00.000Z
CVE-2012-0315 
Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-22T11:00:00.000Z
CVE-2012-0316 
The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-02T00:00:00.000Z
CVE-2012-0317 
Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the (1) commenting feature or (2) community script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-03T02:00:00.000Z
CVE-2012-0318 
Multiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to inject arbitrary web script or HTML via vectors involving templates, a different issue than CVE-2012-1262.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-03T02:00:00.000Z
CVE-2012-0319 
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-03T02:00:00.000Z
CVE-2012-0320 
Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-03T02:00:00.000Z
CVE-2012-0321 
Unspecified vulnerability in the device driver in Kingsoft Internet Security 2011 allows local users to cause a denial of service via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-02T22:00:00.000Z
CVE-2012-0322 
The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-05T21:00:00.000Z
CVE-2012-0323 
Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-09T11:00:00.000Z
CVE-2012-0324 
Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0325.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-09T11:00:00.000Z
CVE-2012-0325 
Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-09T11:00:00.000Z
CVE-2012-0326 
The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-17T10:00:00.000Z
CVE-2012-0327 
Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-04T10:00:00.000Z
CVE-2012-0328 
Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-19T21:00:00.000Z
CVE-2012-0329 
Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-19T15:00:00.000Z
CVE-2012-0330 
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug ID CSCtr20426.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0331 
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0333 
Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2012-0334 
Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks
Problem types: description: Security Bypass
Affected products: vendor: Cisco
product: IronPort Web Security Appliance AsyncOS
Published: 2020-01-15T12:49:13.000Z
CVE-2012-0335 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2012-0337 
SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2012-0338 
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2012-0339 
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2012-0340 
Cross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort Encryption Appliance with software before 6.5.3 allows remote attackers to inject arbitrary web script or HTML via the header parameter to the default URI under admin/, aka bug ID 72410.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-13T22:00:00.000Z
CVE-2012-0352 
Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet, aka Bug IDs CSCti23447, CSCti49507, and CSCtj01991.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-16T21:00:00.000Z
CVE-2012-0353 
The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.5), 8.3 before 8.3(2.22), 8.4 before 8.4(2.1), and 8.5 before 8.5(1.2) does not properly handle flows, which allows remote attackers to cause a denial of service (device reload) via a crafted series of (1) IPv4 or (2) IPv6 UDP packets, aka Bug ID CSCtq10441.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T00:00:00.000Z