Apache HTTP Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2003-1581 - Vulnerability Database

Apache HTTP Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2003-1581

Low

Reference: CVE-2003-1581

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2003-1581

Title: Apache HTTP Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

The Apache HTTP Server 2.0.44 when DNS resolution is enabled for client IP addresses allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response as demonstrated by injecting XSS sequences related to an quotInverse Lookup Log Corruption (ILLC)quot issue.