CVE-2014-10022

Apache Traffic Server is affected in versions before 5.1.2. The vulnerability arises from an issue in internal buffer sizing that can allow a remote attacker to cause a denial of service. Affected component is the HTTP handling path (HttpTransact.cc as cited in multiple sources) and the root caus...

CVE-2014-10022

Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing...

Apache Traffic Server 'HttpTransact.cc' Denial of Service Vulnerability

Traffic Server is an open source proxy server and Web cache server developed by the Apache Software Foundation. A denial of service vulnerability exists in Apache Traffic Server 'HttpTransact.cc' that allows remote attackers to crash the affected process, resulting in a denial of service...

Apache Traffic Server Host HTTP XSS

The version of Apache Traffic Server running on the remote host is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input. By sending a specially crafted host header, a remote, unauthenticated attacker can execute arbitrary script code in the...

DEBIAN-CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

Design/Logic Flaw

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-3525

CVE-2014-3525 affects Apache Traffic Server 3.x (up to 3.2.5), 4.x before 4.2.1.1, and 5.x before 5.0.1. The connected sources describe an unspecified vulnerability related to synthetic health checks that can lead to DoS. Public details are limited in the provided docs; some entries reference upd...

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

[SECURITY] Fedora 20 Update: trafficserver-4.2.1.1-0.fc20

Apache Traffic Server is a fast, scalable and extensible HTTP/1.1 compliant caching proxy server...

trafficserver -- unspecified vulnerability

Bryan Call reports: Below is our announcement for the security issue reported to us from Yahoo! Japan. All versions of Apache Traffic Server are vulnerable. We urge users to upgrade to either 4.2.1.1 or 5.0.1 immediately. This fixes CVE-2014-3525 and limits access to how the health checks are...

Inktomi Traffic Server 4.0/5.x Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7596/info Inktomi Traffic Server is prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of input passed to the proxy, which will be echoed back in error pages under some circumstances. ...

Inktomi Traffic Server 4/5 Traffic_Manager Path Argument Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/5098/info Inktomi Traffic Server is a transparent web caching application. It is designed for use with Unix and Linux variants as well as Microsoft Windows operating environments. A buffer overflow vulnerability has been...

CKEditor 4.0.1 多个安全漏洞

CKEditor是一款在线文字编辑器 CKEditor存在多个安全漏洞，允许攻击者利用漏洞进行跨站请求伪造，跨站脚本攻击及获取路径信息 0 CKEditor 4.0.1 厂商解决方案 目前没有详细解决方案提供： http://ckeditor.com/ =========================================== Vulnerable Software: ckeditor 4.0.1 standard Download:...

glossword 1.8.12 - Multiple Vulnerabilities

glossword 1.8.12 - Multiple Vulnerabilities =================================================== Vulnerable Software: Glossword 1.8.12 Tested version: Glossword 1.8.12 Download: http://sourceforge.net/projects/glossword/files/glossword/1.8.12/ Vulns: XSS && Database Backup Disclosure && CSRF &&...

FreeBSD Ports: trafficserver

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apache Traffic Server Version

The remote host is running Apache Traffic Server, an open source caching server. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid58592; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate"...