CVE-2003-0993

Published: Mar 29, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.

Affected (22)

Products: Apache: Http Server

1 product

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 1.3.11
Apache Http Server	Version 1.3.12
Apache Http Server	Version 1.3.14
Apache Http Server	Version 1.3.17
Apache Http Server	Version 1.3.18
Apache Http Server	Version 1.3.19
Apache Http Server	Version 1.3.1
Apache Http Server	Version 1.3.20
Apache Http Server	Version 1.3.22
Apache Http Server	Version 1.3.23
Apache Http Server	Version 1.3.24
Apache Http Server	Version 1.3.25
Apache Http Server	Version 1.3.26
Apache Http Server	Version 1.3.27
Apache Http Server	Version 1.3.28
Apache Http Server	Version 1.3.29
Apache Http Server	Version 1.3.3
Apache Http Server	Version 1.3.4
Apache Http Server	Version 1.3.6
Apache Http Server	Version 1.3.7
Apache Http Server	Version 1.3.9
Apache Http Server	Version 1.3

References (46)

http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046

Source: cve@mitre.org

http://issues.apache.org/bugzilla/show_bug.cgi?id=23850

Source: cve@mitre.org

http://marc.info/?l=apache-cvs&m=107869603013722

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108437852004207&w=2

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200405-22.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1

Source: cve@mitre.org

http://www.apacheweek.com/features/security-13

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/9829

Source: cve@mitre.org

PatchVendor Advisory

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643

Source: cve@mitre.org

http://www.trustix.org/errata/2004/0027

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/15422

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100111

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4670

Source: cve@mitre.org

http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046

Source: af854a3a-2127-422b-91ae-364da2661108

http://issues.apache.org/bugzilla/show_bug.cgi?id=23850

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=apache-cvs&m=107869603013722

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=108437852004207&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200405-22.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.apacheweek.com/features/security-13

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/9829

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.trustix.org/errata/2004/0027

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/15422

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100111

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4670

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.