CVE-2002-2103

Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup…

published August 5, 2005

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06057 · 93.3th percentile
Published
2005-08-05T04:00Z
EPSS history
Timeline
  • 05 AUG 04:00Z
    Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup…
    cvelistv5