CVE-2003-1578
Status: ModifiedMedium (4.3)—
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Base score: 4.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.10%
- Percentile among all scored CVEs: 65
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-Other
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1
- http://www.securityfocus.com/archive/1/313867
- http://www.securityfocus.com/bid/7012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56633
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1
- http://www.securityfocus.com/archive/1/313867
- http://www.securityfocus.com/bid/7012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56633
Raw JSON (NVD)
Show
{
"id": "CVE-2003-1578",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-02-05T22:30:01.657",
"references": [
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/313867",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/7012",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633",
"source": "cve@mitre.org"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/313867",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/7012",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56633",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a \"format=\" substring, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue."
},
{
"lang": "es",
"value": "Sun ONE (conocido también como iPlanet) Web Server v4.1 hasta SP12 y v6.0 hasta SP5, cuando la resolución DNS está activada para direcciones IP de clientes, permite a atacantes remotos ocultar peticiones HTTP desde la funcionalidad log-preview por acompañamiento de peticiones con respuestas DNS manipuladas especificando un nombre de dominio que empieza por la subcadena cadena \"format=\", relacionado con el tema \"Inverse Lookup Log Corruption (ILLC)\".\r\n\r\n\r\n"
}
],
"lastModified": "2026-06-16T22:04:41.637",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:one_web_server:*:sp12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B96D0FA5-9288-4B6D-8D81-C892FE8CCBE0",
"versionEndIncluding": "4.1"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33621D67-8191-42EE-8859-8B5FC30F935A"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C6F8563-701E-4E54-A0C9-67E9DF74D60D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4022E5C6-5651-45DD-AF73-89CF38E71D9D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEF4CFCE-DEEC-4652-A96F-0C7B5A88175A"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE01BAC9-DC57-4BC8-9BFB-9C7C94A516A8"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CEA91AD-443D-4856-AC7A-3DDE0791134D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07C1D4DC-252A-4602-A916-32E51CCA75B1"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "526D2FAD-4241-412C-8863-B273D3733153"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8A796CB-D675-49FC-98BA-4D527211C70D"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8693959B-7D5D-414B-8660-2A693AF24541"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BDC4A06-33A1-4619-B870-7F2AF1D332F4"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A445032-AD7B-4971-B175-DF3183A4A12C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:one_web_server:*:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "404F6586-4E74-40CE-B579-945D21FC4AB0",
"versionEndIncluding": "6.0"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD6EF410-9D8F-4C94-8636-93D455E0C072"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CA92E60-8D25-4BA0-8C71-7A271439DEDD"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A968709C-2B0B-423B-8A75-61D301DE7398"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38698A3B-9597-4BC9-B112-BB908C3DE86B"
},
{
"criteria": "cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78587B6D-2A95-4714-9632-4F75CD552E7A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}