CVE-2003-1577

{"id": "CVE-2003-1577", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2010-02-05T22:30:01.563", "references": [{"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/313867", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56632", "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/313867", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56632", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316."}, {"lang": "es", "value": "Sun ONE (tambien conocido como iPlanet) Web Server v4.1 hasta SP12 y v6.0 hasta SP5, cuando la resoluci\u00f3n DNS est\u00e1 activada para direcciones IP de clientes, permite a atacantes remotos inyectar t\u00e9xto de su elecci\u00f3n dentro de ficheros de log, y provocar un ataque de secuencias de comandos en sitios cruzados (XSS)involucrando al analizador iPlanet Log, a trav\u00e9s de una petici\u00f3n HTTP en ocnjunci\u00f3n con una respuesta DNS manipulada, relacionado con el tema \"Inverse Lookup Log Corruption (ILLC)\", una vulnerabilidad difrente que CVE-2002-1315 y CVE-2002-1316."}], "lastModified": "2024-11-20T23:47:29.467", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sun:one_web_server:*:sp12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B96D0FA5-9288-4B6D-8D81-C892FE8CCBE0", "versionEndIncluding": "4.1"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33621D67-8191-42EE-8859-8B5FC30F935A"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C6F8563-701E-4E54-A0C9-67E9DF74D60D"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4022E5C6-5651-45DD-AF73-89CF38E71D9D"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEF4CFCE-DEEC-4652-A96F-0C7B5A88175A"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE01BAC9-DC57-4BC8-9BFB-9C7C94A516A8"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CEA91AD-443D-4856-AC7A-3DDE0791134D"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07C1D4DC-252A-4602-A916-32E51CCA75B1"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "526D2FAD-4241-412C-8863-B273D3733153"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8A796CB-D675-49FC-98BA-4D527211C70D"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8693959B-7D5D-414B-8660-2A693AF24541"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BDC4A06-33A1-4619-B870-7F2AF1D332F4"}, {"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A445032-AD7B-4971-B175-DF3183A4A12C"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sun:one_web_server:*:sp5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "404F6586-4E74-40CE-B579-945D21FC4AB0", "versionEndIncluding": "6.0"}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD6EF410-9D8F-4C94-8636-93D455E0C072"}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CA92E60-8D25-4BA0-8C71-7A271439DEDD"}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A968709C-2B0B-423B-8A75-61D301DE7398"}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38698A3B-9597-4BC9-B112-BB908C3DE86B"}, {"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78587B6D-2A95-4714-9632-4F75CD552E7A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}