Description
Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafted response.
Remediation
References
Related Vulnerabilities
WordPress Plugin SportsPress-Sports Club & League Manager Cross-Site Scripting (2.7.1)
WordPress Plugin Smart Slideshow 'upload.php' Arbitrary File Upload (2.1)
WordPress Plugin Swipe Checkout for Jigoshop Cross-Site Scripting (3.1.0)
WordPress Plugin YITH WooCommerce Badge Management Security Bypass (1.3.19)
WordPress Plugin Custom Contact Forms Security Bypass (5.1.0.3)