PT-2010-1199 · Sun · Sun One Web Server

Published 2010-02-05 · Updated 2010-02-08 · CVE-2003-1579

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun ONE (aka iPlanet) Web Server 6 on Windows

Description The issue allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains. This is related to an "Inverse Lookup Log Corruption (ILLC)" issue, which occurs when DNS resolution is enabled for client IP addresses, and the logging format does not identify whether a dotted quad represents an unresolved IP address.

Recommendations For Sun ONE (aka iPlanet) Web Server 6 on Windows, consider disabling DNS resolution for client IP addresses as a temporary workaround to minimize the risk of IP address spoofing.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2003-1579

Affected Products

Sun One Web Server

References · 3

• 🔥 http://securityfocus.com/archive/1/313867 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1579 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1579 · Note