Denial of Service Vulnerability in Cisco Wide Area Application Services

CVE-2014-3285

Summary

The Cisco Wide Area Application Services (WAAS) prior to version 5.3.5a is susceptible to a denial of service issue when SharePoint acceleration is enabled. This vulnerability arises due to improper parsing of SharePoint responses, which could allow a remote attacker to exploit a crafted SharePoint application. Successful exploitation could result in the application optimization handler being reloaded, thus causing disruption in service.

References