Lucene search

K
freebsdFreeBSD6318B303-3507-11E4-B76C-0011D823EEBD
HistoryJul 23, 2014 - 12:00 a.m.

trafficserver -- unspecified vulnerability

2014-07-2300:00:00
vuxml.freebsd.org
12

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.002

Percentile

55.9%

Bryan Call reports:

Below is our announcement for the security issue reported to us
from Yahoo! Japan. All versions of Apache Traffic Server are
vulnerable. We urge users to upgrade to either 4.2.1.1 or 5.0.1
immediately.
This fixes CVE-2014-3525 and limits access to how the health
checks are performed.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchtrafficserver< 5.0.1UNKNOWN

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.002

Percentile

55.9%

Related for 6318B303-3507-11E4-B76C-0011D823EEBD