Uploaded image for project: 'Traffic Server'
  1. Traffic Server
  2. TS-3082

ATS does not bind sessions to SNI names.

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Reopened
    • Critical
    • Resolution: Unresolved
    • None
    • sometime
    • SSL

    Description

      More information in paper:

      Virtual Host Confusion: Weaknesses and Exploits. Black Hat 2014 Report
      http://bh.ht.vc/vhost_confusion.pdf

      Attachments

        Issue Links

          blocks

          Task - A task that needs to be done. TS-3669 ☂ Critical issues for v6.0.0 release

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. TS-4468 http.server_session_sharing.match = both unsafe with HTTPS

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. TS-4468 http.server_session_sharing.match = both unsafe with HTTPS

          • Major - Major loss of function.
          • Closed

          Activity

            People

              briang Brian Geffon
              SaveTheRbtz Alexey Ivanov
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated: