Back
CVE-2003-1578
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows…
Medium4.3EPSS 1.1%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
- EPSS (exploitation in 30 days)
- 1.1% · top 34% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (4)
- 201453 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
- 7012 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 20030304 Log corruption on multiple webservers, log analyzers,... (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- iplanet-logpreview-security-bypass(56633) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2003-1578)Record last updated .