Description

Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.

Remediation

References

CVE-2002-2103

Related Vulnerabilities

ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6528)

Jenkins Insufficient Verification of Data Authenticity Vulnerability (CVE-2015-7539)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7875)

WordPress Plugin WordPress Landing Pages Cross-Site Scripting (1.8.7)

Dolibarr Incorrect Default Permissions Vulnerability (CVE-2020-13240)

Severity

Medium

Classification

CVE-2002-2103

Tags

Missing Update Known Vulnerabilities