Lucene search

MitreCVE-2003-1580

HistoryFeb 05, 2010 - 10:30 p.m.

CVE-2003-1580

2010-02-0522:30:02

CWE-189

mitre

web.nvd.nist.gov

apache http server

dns resolution

ip address spoofing

illc

cve-2003-1580

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

61.8%

JSON

The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an “Inverse Lookup Log Corruption (ILLC)” issue.

Affected configurations

Nvd

Node

apachehttp_serverMatch2.0.44

VendorProductVersionCPE
apachehttp_server2.0.44cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache	http_server	2.0.44	cpe:2.3:a:apache:http_server:2.0.44:::::::*

References

www.securityfocus.com/archive/1/313867

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

61.8%

JSON

Related for CVE-2003-1580