Test Kennung:	1.3.6.1.4.1.25623.1.0.902664
Kategorie:	Denial of Service
Titel:	Apache Traffic Server HTTP Host Header DoS Vulnerability
Zusammenfassung:	Apache Traffic Server is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Apache Traffic Server is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to an improper allocation of heap memory when processing HTTP request with a large 'HOST' header value and can be exploited to cause a denial of service via a specially crafted packet. Vulnerability Impact: Successful exploitation may allow remote attackers to cause the application to crash, creating a denial of service condition. Affected Software/OS: Apache Traffic Server 2.0.x, 3.0.x before 3.0.4, 3.1.x before 3.1.3. Solution: Upgrade to Apache Traffic Server 3.0.4 or 3.1.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0256 BugTraq ID: 52696 http://www.securityfocus.com/bid/52696 Bugtraq: 20120322 [ANNOUNCE] Apache Traffic Server releases for security incident CVE-2012-0256 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-03/0118.html http://seclists.org/fulldisclosure/2012/Mar/260 https://www.cert.fi/en/reports/2012/vulnerability612884.html http://www.securitytracker.com/id?1026847
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.