PT-2010-1199 · Sun · Sun One Web Server

Publicado 2010-02-05 · Atualizado 2010-02-08 · CVE-2003-1579

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun ONE (aka iPlanet) Web Server 6 on Windows

Description The issue allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains. This is related to an "Inverse Lookup Log Corruption (ILLC)" issue, which occurs when DNS resolution is enabled for client IP addresses, and the logging format does not identify whether a dotted quad represents an unresolved IP address.

Recommendations For Sun ONE (aka iPlanet) Web Server 6 on Windows, consider disabling DNS resolution for client IP addresses as a temporary workaround to minimize the risk of IP address spoofing.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2003-1579

Produtos afetados

Sun One Web Server

Referências · 3

• 🔥 http://securityfocus.com/archive/1/313867 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1579 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1579 · Nota