medium5.0
CVE-2002-2103
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fail…
Impact
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | Versions 1.3.9, 1.3.11, 1.3.12, 1.3.13, 1.3.14, 1.3.15 |