CVE-2003-1418: Infoleak

Published Dec 31, 2003

Updated

Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID).

Affected Software

6 affected components

Apache HTTP Server=1.3.23

Apache HTTP Server=1.3.27

Apache HTTP Server=1.3.25

Apache HTTP Server=1.3.24

Apache HTTP Server=1.3.26

Apache HTTP Server=1.3.22

Remediation

Patch Available

http://www.securityfocus.com/bid/6943

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityWeaknessAffected Software

Oct 20, 2007

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1418?

CVE-2003-1418 is considered a moderate severity vulnerability as it allows remote attackers to obtain sensitive information.

How do I fix CVE-2003-1418?

To fix CVE-2003-1418, you should upgrade Apache HTTP Server to a version greater than 1.3.27.

What versions of Apache HTTP Server are affected by CVE-2003-1418?

CVE-2003-1418 affects Apache HTTP Server versions 1.3.22 through 1.3.27 on OpenBSD.

What information can be leaked through CVE-2003-1418?

CVE-2003-1418 can leak sensitive information such as inode numbers and child process IDs (PID) via the ETag header and multipart MIME boundary.

Is CVE-2003-1418 still a concern in modern environments?

CVE-2003-1418 is primarily a legacy concern, but should be addressed if running affected versions of Apache HTTP Server.