ID de Prueba:	1.3.6.1.4.1.25623.1.0.902664
Categoría:	Denial of Service
Título:	Apache Traffic Server HTTP Host Header DoS Vulnerability
Resumen:	Apache Traffic Server is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Apache Traffic Server is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to an improper allocation of heap memory when processing HTTP request with a large 'HOST' header value and can be exploited to cause a denial of service via a specially crafted packet. Vulnerability Impact: Successful exploitation may allow remote attackers to cause the application to crash, creating a denial of service condition. Affected Software/OS: Apache Traffic Server 2.0.x, 3.0.x before 3.0.4, 3.1.x before 3.1.3. Solution: Upgrade to Apache Traffic Server 3.0.4 or 3.1.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0256 BugTraq ID: 52696 http://www.securityfocus.com/bid/52696 Bugtraq: 20120322 [ANNOUNCE] Apache Traffic Server releases for security incident CVE-2012-0256 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-03/0118.html http://seclists.org/fulldisclosure/2012/Mar/260 https://www.cert.fi/en/reports/2012/vulnerability612884.html http://www.securitytracker.com/id?1026847
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.