CVE-2014-3525

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-3525
Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://mail-archives.apache.org/mod_mbox/trafficserver-users/201407.mbox/%3CBFCEC9C8-1BE9-4DCA-AF9C-B8FE798EEC07%40yahoo-inc.com%3E
http://secunia.com/advisories/60375
https://exchange.xforce.ibmcloud.com/vulnerabilities/95495
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apache:traffic_server:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.0.0:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.3.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.3.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.3.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:5.0.0:*:*:*:*:*:*:*
History

07 Nov 2023, 02:20

Type Values Removed Values Added
References
  • {'url': 'http://mail-archives.apache.org/mod_mbox/trafficserver-users/201407.mbox/%3CBFCEC9C8-1BE9-4DCA-AF9C-B8FE798EEC07@yahoo-inc.com%3E', 'name': '[trafficserver-users] 20140723 [ANNOUNCE] Apache Traffic Server releases for security incident CVE-2014-3525', 'tags': [], 'refsource': 'MLIST'}
  • () http://mail-archives.apache.org/mod_mbox/trafficserver-users/201407.mbox/%3CBFCEC9C8-1BE9-4DCA-AF9C-B8FE798EEC07%40yahoo-inc.com%3E -
Information

Published : 2014-08-22 14:55

Updated : 2023-12-10 11:31

NVD link : CVE-2014-3525

Mitre link : CVE-2014-3525

CVE.ORG link : CVE-2014-3525

JSON object : View

Products Affected

apache

  • traffic_server
CWE
NVD-CWE-noinfo