CVE-2003-1580: Medium severity Apache HTTP Server vulnerability
The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1580?
CVE-2003-1580 is classified as a moderate severity vulnerability.
How do I fix CVE-2003-1580?
To fix CVE-2003-1580, upgrade to a later version of the Apache HTTP Server beyond 2.0.44 that addresses this issue.
What impact does CVE-2003-1580 have on my system?
CVE-2003-1580 can allow remote attackers to spoof IP addresses, potentially facilitating further attacks.
Is CVE-2003-1580 present in newer versions of Apache?
CVE-2003-1580 is specific to Apache HTTP Server version 2.0.44 and is not present in newer, patched versions.
How can I mitigate the risks associated with CVE-2003-1580?
Mitigation includes disabling DNS resolution for client IP addresses or updating to a secure version of the web server.