PT-2010-1198 · Sun · Sun One Web Server

Published 2010-02-05 · Updated 2017-08-17 · CVE-2003-1578

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun ONE (aka iPlanet) Web Server versions 4.1 through SP12 Sun ONE (aka iPlanet) Web Server versions 6.0 through SP5

Description The issue allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.

Recommendations For Sun ONE (aka iPlanet) Web Server versions 4.1 through SP12, consider disabling DNS resolution for client IP addresses to prevent exploitation. For Sun ONE (aka iPlanet) Web Server versions 6.0 through SP5, consider disabling DNS resolution for client IP addresses to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-1578

Affected Products

Sun One Web Server

References · 6

• 🔥 http://securityfocus.com/archive/1/313867 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1578 · Security Note
• http://securityfocus.com/bid/7012 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1578 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56633 · Note