NetSight
medium4.3

CVE-2003-1418

Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode nu…

Impact

Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID).

Affected products

VendorProductAffected versions
ApacheHttp Server
Versions 1.3.22, 1.3.23, 1.3.24, 1.3.25, 1.3.26, 1.3.27

Weakness classification

References