Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2010-2952 Details

Description

Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafted response.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://secunia.com/advisories/41356 CVEVendor Advisory
http://securitytracker.com/id?1024417 CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/61721 CVE
https://issues.apache.org/jira/browse/TS-425 CVE
http://trafficserver.apache.org/ CVE

see all 16 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-20Improper Input Validation[email protected]

Affected Products

ProductVersions
apache traffic server
<= 2.0.0
2.1.0
2.1.1

CPE

  • cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:traffic_server:2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:traffic_server:2.1.1:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2010-2952
NVD Published Date:
Sep 13, 2010
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2010-2952 Details - Not Deferred