CVE-2003-1577

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
2.6LOW
EPSS
0.3%
top 46.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN ONE WEB Server
Timeline
PublishedFeb 5
Latest updateApr 29

Description

Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an "Inverse Lookup Log Corruption (ILLC)" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-3cq9-wp9j-2w5v: Sun ONE (aka iPlanet) Web Server 4↗2022-04-29
▶
CVEList
CVE-2003-1577: Sun ONE (aka iPlanet) Web Server 4↗2010-02-05
▶
CVE-2003-1577 (LOW CVSS 2.6) | Sun ONE (aka iPlanet) Web Server 4. | cvebase.io