CVE-2001-1556

Severity CVSS v4.0:

Pending analysis

Type:

CWE-532 Information Exposure Through Log Files

Publication date:

31/12/2001

Last modified:

03/04/2025

Description

The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:N/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 5.00 MEDIUM
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): None
Integrity (I): Physical
Availability (A): None

Base Score 2.0

5.00

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:apache:http_server::::::::	1.3.0 (including)	1.3.31 (excluding)
cpe:2.3:a:apache:http_server::::::::	2.0.0 (including)	2.0.49 (excluding)

To consult the complete list of CPE names with products and versions, see this page

CVE-2001-1556

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools