CVE-2003-1578

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2003-03-04T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a \"format=\" substring, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "201453", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1"}, {"name": "7012", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/7012"}, {"name": "20030304 Log corruption on multiple webservers, log analyzers,...", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/313867"}, {"name": "iplanet-logpreview-security-bypass(56633)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2003-1578", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a \"format=\" substring, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "201453", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1"}, {"name": "7012", "refsource": "BID", "url": "http://www.securityfocus.com/bid/7012"}, {"name": "20030304 Log corruption on multiple webservers, log analyzers,...", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/313867"}, {"name": "iplanet-logpreview-security-bypass(56633)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T02:35:17.123Z"}, "title": "CVE Program Container", "references": [{"name": "201453", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1"}, {"name": "7012", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/7012"}, {"name": "20030304 Log corruption on multiple webservers, log analyzers,...", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/313867"}, {"name": "iplanet-logpreview-security-bypass(56633)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2003-1578", "datePublished": "2010-02-05T22:13:00.000Z", "dateReserved": "2010-02-05T00:00:00.000Z", "dateUpdated": "2024-08-08T02:35:17.123Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:one_web_server:*:sp12:*:*:*:*:*:*", "matchCriteriaId": "B96D0FA5-9288-4B6D-8D81-C892FE8CCBE0", "versionEndIncluding": "4.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "33621D67-8191-42EE-8859-8B5FC30F935A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*", "matchCriteriaId": "0C6F8563-701E-4E54-A0C9-67E9DF74D60D", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*", "matchCriteriaId": "4022E5C6-5651-45DD-AF73-89CF38E71D9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*", "matchCriteriaId": "EEF4CFCE-DEEC-4652-A96F-0C7B5A88175A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*", "matchCriteriaId": "AE01BAC9-DC57-4BC8-9BFB-9C7C94A516A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*", "matchCriteriaId": "1CEA91AD-443D-4856-AC7A-3DDE0791134D", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*", "matchCriteriaId": "07C1D4DC-252A-4602-A916-32E51CCA75B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*", "matchCriteriaId": "526D2FAD-4241-412C-8863-B273D3733153", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*", "matchCriteriaId": "B8A796CB-D675-49FC-98BA-4D527211C70D", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*", "matchCriteriaId": "8693959B-7D5D-414B-8660-2A693AF24541", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*", "matchCriteriaId": "1BDC4A06-33A1-4619-B870-7F2AF1D332F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*", "matchCriteriaId": "8A445032-AD7B-4971-B175-DF3183A4A12C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:one_web_server:*:sp5:*:*:*:*:*:*", "matchCriteriaId": "404F6586-4E74-40CE-B579-945D21FC4AB0", "versionEndIncluding": "6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "CD6EF410-9D8F-4C94-8636-93D455E0C072", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp1:*:*:*:*:*:*", "matchCriteriaId": "8CA92E60-8D25-4BA0-8C71-7A271439DEDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp2:*:*:*:*:*:*", "matchCriteriaId": "A968709C-2B0B-423B-8A75-61D301DE7398", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*", "matchCriteriaId": "38698A3B-9597-4BC9-B112-BB908C3DE86B", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*", "matchCriteriaId": "78587B6D-2A95-4714-9632-4F75CD552E7A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a \"format=\" substring, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue."}, {"lang": "es", "value": "Sun ONE (conocido tambi\u00e9n como iPlanet) Web Server v4.1 hasta SP12 y v6.0 hasta SP5, cuando la resoluci\u00f3n DNS est\u00e1 activada para direcciones IP de clientes, permite a atacantes remotos ocultar peticiones HTTP desde la funcionalidad log-preview por acompa\u00f1amiento de peticiones con respuestas DNS manipuladas especificando un nombre de dominio que empieza por la subcadena cadena \"format=\", relacionado con el tema \"Inverse Lookup Log Corruption (ILLC)\".\r\n\r\n\r\n"}], "id": "CVE-2003-1578", "lastModified": "2026-06-16T22:04:41.637", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-02-05T22:30:01.657", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/archive/1/313867"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/7012"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/archive/1/313867"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/7012"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}