Vulnerability in Apache Http Server

CVE-2002-2103

Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.

EPSS: 0.061 (92.6th percentile) — read the EPSS interpretation.

Affected products

Apache Http_server — versions 1.3.9, 1.3.11, 1.3.12
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)