ByteOS Network

NVD Vulnerability Details :

CVE-2001-1556

Deferred

Source-cve@mitre.org

Published At-31 Dec, 2001 | 05:00

Updated At-03 Apr, 2025 | 01:03

The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

The Apache Software Foundation

>>http_server>>Versions from 1.3.0(inclusive) to 1.3.31(exclusive)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

The Apache Software Foundation

>>http_server>>Versions from 2.0.0(inclusive) to 2.0.49(exclusive)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-532	Primary	nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2006-08-30T00:00:00

This is a duplicate CVE name and is a combination of CVE-2003-0020 and CVE-2003-0083.

References

Hyperlink	Source	Resource
http://archives.neohapsis.com/archives/bugtraq/2001-10/0231.html	cve@mitre.org	Broken Link
http://httpd.apache.org/docs/logs.html	cve@mitre.org	Vendor Advisory
http://www.iss.net/security_center/static/7363.php	cve@mitre.org	Broken Link
http://archives.neohapsis.com/archives/bugtraq/2001-10/0231.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://httpd.apache.org/docs/logs.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.iss.net/security_center/static/7363.php	af854a3a-2127-422b-91ae-364da2661108	Broken Link

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History