Description

Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafted response.

Remediation

References

CVE-2010-2952

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.10)

WordPress Plugin Additional Variation Images for WooCommerce Cross-Site Scripting (1.1.28)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.34)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0050)

WordPress Plugin RAYS Grid Cross-Site Request Forgery (1.2.2)

Severity

Medium

Classification

CVE-2010-2952 CWE-20

Tags

Missing Update Known Vulnerabilities