CVE-2002-2103

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.

Affected (13)

Products: Apache: Http Server

Apache

1 product

Http Server

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 1.3.11
Apache Http Server	Version 1.3.12
Apache Http Server	Version 1.3.13
Apache Http Server	Version 1.3.14
Apache Http Server	Version 1.3.15
Apache Http Server	Version 1.3.16
Apache Http Server	Version 1.3.17
Apache Http Server	Version 1.3.18
Apache Http Server	Version 1.3.19
Apache Http Server	Version 1.3.20
Apache Http Server	Version 1.3.22
Apache Http Server	Version 1.3.23
Apache Http Server	Version 1.3.9