CVE-2007-3923

The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service (loss of service) via a flood of TCP SYN packets to port (1) 139 or (2) 445.

• http://secunia.com/advisories/26122Patch, Vendor Advisory
• http://www.cisco.com/warp/public/707/cisco-sa-20070718-waas.shtmlPatch
• http://www.osvdb.org/36120
• http://www.securityfocus.com/bid/24956Patch
• http://www.securitytracker.com/id?1018416Patch
• http://www.vupen.com/english/advisories/2007/2572
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35477
• http://secunia.com/advisories/26122Patch, Vendor Advisory
• http://www.cisco.com/warp/public/707/cisco-sa-20070718-waas.shtmlPatch
• http://www.osvdb.org/36120
• http://www.securityfocus.com/bid/24956Patch
• http://www.securitytracker.com/id?1018416Patch
• http://www.vupen.com/english/advisories/2007/2572
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35477

Published

Jul 21, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3917The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3…
• CVE-2007-3918Cross-site scripting (XSS) vulnerability in account/verify.p…
• CVE-2007-3919(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow …
• CVE-2007-3920GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz…
• CVE-2007-3921gforge 3.1 and 4.5.14 allows local users to truncate arbitra…
• CVE-2007-3922Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2007-3924Argument injection vulnerability in Microsoft Internet Explo…
• CVE-2007-3925Multiple buffer overflows in the IMAP service (imapd32.exe) …
• CVE-2007-3926Ipswitch IMail Server 2006 before 2006.21 allows remote atta…
• CVE-2007-3927Multiple buffer overflows in Ipswitch IMail Server 2006 befo…
• CVE-2007-3928Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted…
• CVE-2007-3929Use-after-free vulnerability in the BitTorrent support in Op…