Vulnerability Details CVE-2002-2103
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.023
EPSS Ranking 83.9%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2002-2103
-
cpe:2.3:a:apache:http_server:1.3.11
-
cpe:2.3:a:apache:http_server:1.3.12
-
cpe:2.3:a:apache:http_server:1.3.13
-
cpe:2.3:a:apache:http_server:1.3.14
-
cpe:2.3:a:apache:http_server:1.3.15
-
cpe:2.3:a:apache:http_server:1.3.16
-
cpe:2.3:a:apache:http_server:1.3.17
-
cpe:2.3:a:apache:http_server:1.3.18
-
cpe:2.3:a:apache:http_server:1.3.19
-
cpe:2.3:a:apache:http_server:1.3.20
-
cpe:2.3:a:apache:http_server:1.3.22
-
cpe:2.3:a:apache:http_server:1.3.23
-
cpe:2.3:a:apache:http_server:1.3.9