PT-2010-1201 · Apache+1 · Apache Http Server+1

Publicado 2010-02-05 · Atualizado 2010-02-08 · CVE-2003-1581

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache HTTP Server version 2.0.44

Description The issue allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response. This can be used to inject XSS sequences, and is related to an "Inverse Lookup Log Corruption (ILLC)" issue.

Recommendations For Apache HTTP Server version 2.0.44, consider disabling DNS resolution for client IP addresses as a temporary workaround to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2003-1581

ECHO-2734-798D-A68B

Produtos afetados

Apache Http Server

Debian

Referências · 5

• 🔥 http://securityfocus.com/archive/1/313867 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1581 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2003-1581 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-1581 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2003-1581 · Aviso do Fabricante