CVE-2003-1577
Estado: ModificadaBaja (2.6)—
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an "Inverse Lookup Log Corruption (ILLC)" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
- Puntuación base: 2.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.07%
- Percentil entre todas las CVEs puntuadas: 64
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1
- http://www.securityfocus.com/archive/1/313867
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56632
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1
- http://www.securityfocus.com/archive/1/313867
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56632
JSON original (NVD)
Mostrar
{
"id": "CVE-2003-1577",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "HIGH",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-02-05T22:30:01.563",
"references": [
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/313867",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56632",
"source": "cve@mitre.org"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/313867",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56632",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316."
},
{
"lang": "es",
"value": "Sun ONE (tambien conocido como iPlanet) Web Server v4.1 hasta SP12 y v6.0 hasta SP5, cuando la resolución DNS está activada para direcciones IP de clientes, permite a atacantes remotos inyectar téxto de su elección dentro de ficheros de log, y provocar un ataque de secuencias de comandos en sitios cruzados (XSS)involucrando al analizador iPlanet Log, a través de una petición HTTP en ocnjunción con una respuesta DNS manipulada, relacionado con el tema \"Inverse Lookup Log Corruption (ILLC)\", una vulnerabilidad difrente que CVE-2002-1315 y CVE-2002-1316."
}
],
"lastModified": "2026-06-16T22:04:41.503",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:one_web_server:*:sp12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B96D0FA5-9288-4B6D-8D81-C892FE8CCBE0",
"versionEndIncluding": "4.1"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33621D67-8191-42EE-8859-8B5FC30F935A"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C6F8563-701E-4E54-A0C9-67E9DF74D60D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4022E5C6-5651-45DD-AF73-89CF38E71D9D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEF4CFCE-DEEC-4652-A96F-0C7B5A88175A"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE01BAC9-DC57-4BC8-9BFB-9C7C94A516A8"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CEA91AD-443D-4856-AC7A-3DDE0791134D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07C1D4DC-252A-4602-A916-32E51CCA75B1"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "526D2FAD-4241-412C-8863-B273D3733153"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8A796CB-D675-49FC-98BA-4D527211C70D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8693959B-7D5D-414B-8660-2A693AF24541"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BDC4A06-33A1-4619-B870-7F2AF1D332F4"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A445032-AD7B-4971-B175-DF3183A4A12C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:one_web_server:*:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "404F6586-4E74-40CE-B579-945D21FC4AB0",
"versionEndIncluding": "6.0"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD6EF410-9D8F-4C94-8636-93D455E0C072"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CA92E60-8D25-4BA0-8C71-7A271439DEDD"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A968709C-2B0B-423B-8A75-61D301DE7398"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38698A3B-9597-4BC9-B112-BB908C3DE86B"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78587B6D-2A95-4714-9632-4F75CD552E7A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}