Test ID:	1.3.6.1.4.1.25623.1.0.805129
Category:	Web Servers
Title:	Apache Traffic Server Synthetic Health Checks Remote DoS Vulnerability
Summary:	Apache Traffic Server is prone to a remote denial of service (DoS) vulnerability.
Description:	Summary: Apache Traffic Server is prone to a remote denial of service (DoS) vulnerability. Vulnerability Insight: An unspecified flaw in traffic_cop that is triggered as the program fails to restrict access to synthetic health checks. Vulnerability Impact: Successful exploitation will allow remote attackers to crash the traffic_manager process. Affected Software/OS: Apache Traffic Server version 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 Solution: Upgrade to version 4.2.1.1 or 5.0.1 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3525 http://mail-archives.apache.org/mod_mbox/trafficserver-users/201407.mbox/%3CBFCEC9C8-1BE9-4DCA-AF9C-B8FE798EEC07@yahoo-inc.com%3E http://secunia.com/advisories/60375 XForce ISS Database: apache-traffic-cve20143525-unspecified(95495) https://exchange.xforce.ibmcloud.com/vulnerabilities/95495
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.