CVE-2003-1578
Estado: ModificadaMedia (4.3)—
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.10%
- Percentil entre todas las CVEs puntuadas: 65
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1
- http://www.securityfocus.com/archive/1/313867
- http://www.securityfocus.com/bid/7012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56633
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1
- http://www.securityfocus.com/archive/1/313867
- http://www.securityfocus.com/bid/7012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56633
JSON original (NVD)
Mostrar
{
"id": "CVE-2003-1578",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-02-05T22:30:01.657",
"references": [
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/313867",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/7012",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633",
"source": "cve@mitre.org"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/313867",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/7012",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a \"format=\" substring, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue."
},
{
"lang": "es",
"value": "Sun ONE (conocido también como iPlanet) Web Server v4.1 hasta SP12 y v6.0 hasta SP5, cuando la resolución DNS está activada para direcciones IP de clientes, permite a atacantes remotos ocultar peticiones HTTP desde la funcionalidad log-preview por acompañamiento de peticiones con respuestas DNS manipuladas especificando un nombre de dominio que empieza por la subcadena cadena \"format=\", relacionado con el tema \"Inverse Lookup Log Corruption (ILLC)\".\r\n\r\n\r\n"
}
],
"lastModified": "2026-06-16T22:04:41.637",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:one_web_server:*:sp12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B96D0FA5-9288-4B6D-8D81-C892FE8CCBE0",
"versionEndIncluding": "4.1"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33621D67-8191-42EE-8859-8B5FC30F935A"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C6F8563-701E-4E54-A0C9-67E9DF74D60D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4022E5C6-5651-45DD-AF73-89CF38E71D9D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEF4CFCE-DEEC-4652-A96F-0C7B5A88175A"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE01BAC9-DC57-4BC8-9BFB-9C7C94A516A8"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CEA91AD-443D-4856-AC7A-3DDE0791134D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07C1D4DC-252A-4602-A916-32E51CCA75B1"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "526D2FAD-4241-412C-8863-B273D3733153"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8A796CB-D675-49FC-98BA-4D527211C70D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8693959B-7D5D-414B-8660-2A693AF24541"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BDC4A06-33A1-4619-B870-7F2AF1D332F4"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A445032-AD7B-4971-B175-DF3183A4A12C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:one_web_server:*:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "404F6586-4E74-40CE-B579-945D21FC4AB0",
"versionEndIncluding": "6.0"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD6EF410-9D8F-4C94-8636-93D455E0C072"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CA92E60-8D25-4BA0-8C71-7A271439DEDD"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A968709C-2B0B-423B-8A75-61D301DE7398"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38698A3B-9597-4BC9-B112-BB908C3DE86B"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78587B6D-2A95-4714-9632-4F75CD552E7A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}