Lucene search
MitreCVE-2001-1556HistoryJul 14, 2005 - 4:00 a.m.
CVE-2001-1556
2005-07-1404:00:00
CWE-532
mitre
web.nvd.nist.gov
88
cve-2001-1556
apache web server
log files
http requests
spoofed ip
unix programs
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.009
Percentile
82.8%
The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.
Affected configurations
Node
apachehttp_serverRange1.3.0–1.3.31
ORapachehttp_serverRange2.0.0–2.0.49
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | http_server | * | cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.009
Percentile
82.8%
Related for CVE-2001-1556