CVE-2003-0993

Severity

75%

Complexity

99%

Confidentiality

106%

mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.

mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

First reported 20 years ago

2004-03-29 05:00:00

Last updated 7 years ago

2017-10-10 01:30:00

Affected Software

Apache Software Foundation Apache HTTP Server 1.3

1.3

Apache Software Foundation Apache HTTP Server 1.3.1

1.3.1

Apache Software Foundation Apache HTTP Server 1.3.3

1.3.3

Apache Software Foundation Apache HTTP Server 1.3.4

1.3.4

Apache Software Foundation Apache HTTP Server 1.3.6

1.3.6

Apache Software Foundation Apache HTTP Server 1.3.9

1.3.9

Apache Software Foundation Apache HTTP Server 1.3.11

1.3.11

Apache Software Foundation Apache HTTP Server 1.3.12

1.3.12

Apache Software Foundation Apache HTTP Server 1.3.14

1.3.14

Apache Software Foundation Apache HTTP Server 1.3.17

1.3.17

Apache Software Foundation Apache HTTP Server 1.3.18

1.3.18

Apache Software Foundation Apache HTTP Server 1.3.19

1.3.19

Apache Software Foundation Apache HTTP Server 1.3.20

1.3.20

Apache Software Foundation Apache HTTP Server 1.3.22

1.3.22

Apache Software Foundation Apache HTTP Server 1.3.23

1.3.23

Apache Software Foundation Apache HTTP Server 1.3.24

1.3.24

Apache Software Foundation Apache HTTP Server 1.3.25

1.3.25

Apache Software Foundation Apache HTTP Server 1.3.26

1.3.26

Apache Software Foundation Apache HTTP Server 1.3.27

1.3.27

Apache Software Foundation Apache HTTP Server 1.3.28

1.3.28

Apache Software Foundation Apache HTTP Server 1.3.29

1.3.29

References

MDKSA-2004:046

http://issues.apache.org/bugzilla/show_bug.cgi?id=23850

[apache-cvs] 20040307 cvs commit: apache-1.3/src/modules/standard mod_access.c

20040512 [OpenPKG-SA-2004.021] OpenPKG Security Advisory (apache)

GLSA-200405-22

101555

101841

57628

http://www.apacheweek.com/features/security-13

Vendor Advisory

9829

Patch, Vendor Advisory

SSA:2004-133

2004-0027

apache-modaccess-obtain-information(15422)

oval:org.mitre.oval:def:100111

oval:org.mitre.oval:def:4670

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.