CVE-2003-1578

3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 48.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN ONE WEB Server
Timeline
PublishedFeb 5
Latest updateApr 29

Description

Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: sunsolve.sun.com ↗Patch: www.securityfocus.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5mp7-vvfx-f7qm: Sun ONE (aka iPlanet) Web Server 4↗2022-04-29
▶
CVEList
CVE-2003-1578: Sun ONE (aka iPlanet) Web Server 4↗2010-02-05
▶
CVE-2003-1578 (MEDIUM CVSS 4.3) | Sun ONE (aka iPlanet) Web Server 4. | cvebase.io