Design/Logic Flaw

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-3525

CVE-2014-3525 affects Apache Traffic Server 3.x (up to 3.2.5), 4.x before 4.2.1.1, and 5.x before 5.0.1. The connected sources describe an unspecified vulnerability related to synthetic health checks that can lead to DoS. Public details are limited in the provided docs; some entries reference upd...

[SECURITY] Fedora 20 Update: trafficserver-4.2.1.1-0.fc20

Apache Traffic Server is a fast, scalable and extensible HTTP/1.1 compliant caching proxy server...

trafficserver -- unspecified vulnerability

Bryan Call reports: Below is our announcement for the security issue reported to us from Yahoo! Japan. All versions of Apache Traffic Server are vulnerable. We urge users to upgrade to either 4.2.1.1 or 5.0.1 immediately. This fixes CVE-2014-3525 and limits access to how the health checks are...

CKEditor 4.0.1 多个安全漏洞

CKEditor是一款在线文字编辑器 CKEditor存在多个安全漏洞，允许攻击者利用漏洞进行跨站请求伪造，跨站脚本攻击及获取路径信息 0 CKEditor 4.0.1 厂商解决方案 目前没有详细解决方案提供： http://ckeditor.com/ =========================================== Vulnerable Software: ckeditor 4.0.1 standard Download:...

glossword 1.8.12 - Multiple Vulnerabilities

glossword 1.8.12 - Multiple Vulnerabilities =================================================== Vulnerable Software: Glossword 1.8.12 Tested version: Glossword 1.8.12 Download: http://sourceforge.net/projects/glossword/files/glossword/1.8.12/ Vulns: XSS && Database Backup Disclosure && CSRF &&...

FreeBSD Ports: trafficserver

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apache Traffic Server Version

The remote host is running Apache Traffic Server, an open source caching server. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid58592; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate"...

Apache Traffic Server 3.0.x < 3.0.4 / 3.1.x < 3.1.3 Host HTTP Header Parsing Remote Overflow

According to its banner, the version of Apache Traffic Server running on the remote host is 3.0.x prior to 3.0.4 or 3.1.x prior to 3.1.3. It is, therefore, affected by a heap-based buffer overflow vulnerability when handling malicious HTTP host headers. A remote, unauthenticated attacker can...

Apache Traffic Server < 3.0.4 / 3.1.3 Buffer Overflow Vulnerability

Binary data 6401.prm...

Apache Traffic Server HTTP Host Header Denial of Service Vulnerability

This host is running Apache Traffic Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodapachetrafficserverhostdosvuln.nasl 5977 2017-04-19 09:02:22Z teissa $ Apache Traffic Server HTTP Host Header Denial of Service Vulnerability Authors: Rachana Shetty...

Apache Traffic Server HTTP Host Header DoS Vulnerability

Apache Traffic Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-0256

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service daemon crash via a long HTTP Host header...

DEBIAN-CVE-2012-0256

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service daemon crash via a long HTTP Host header...

CVE-2012-0256

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service daemon crash via a long HTTP Host header...

CVE-2012-0256

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service daemon crash via a long HTTP Host header...

Design/Logic Flaw

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service daemon crash via a long HTTP Host header...

CVE-2012-0256

Apache Traffic Server is affected by CVE-2012-0256 due to a heap memory allocation bug that can be triggered by a long HTTP Host header, enabling a remote attacker to cause a DoS (daemon crash). Affected versions are 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3. The issue is a heap-based v...

CVE-2012-0256

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service daemon crash via a long HTTP Host header...