NVD

Id
74066  
Name
CVE-2003-0993  
Description
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2004-03-29  
Modified Date
2016-10-17  
Seq
2003-0993  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380846 74066 CVE-2003-0993 MDKSA-2004:046  View
380847 74066 CVE-2003-0993 http://issues.apache.org/bugzilla/show_bug.cgi?id=23850  View
380848 74066 CVE-2003-0993 [apache-cvs] 20040307 cvs commit: apache-1.3/src/modules/standard mod_access.c  View
380849 74066 CVE-2003-0993 20040512 [OpenPKG-SA-2004.021] OpenPKG Security Advisory (apache)  View
380850 74066 CVE-2003-0993 oval:org.mitre.oval:def:100111  View
380851 74066 CVE-2003-0993 oval:org.mitre.oval:def:4670  View
380852 74066 CVE-2003-0993 GLSA-200405-22  View
380853 74066 CVE-2003-0993 101555  View
380854 74066 CVE-2003-0993 101841  View
380855 74066 CVE-2003-0993 57628  View
380856 74066 CVE-2003-0993 http://www.apacheweek.com/features/security-13  View
380857 74066 CVE-2003-0993 9829  View
380858 74066 CVE-2003-0993 SSA:2004-133  View
380859 74066 CVE-2003-0993 2004-0027  View
380860 74066 CVE-2003-0993 apache-modaccess-obtain-information(15422)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62728 JVNDB-2004-000069 Apache HTTP Server の mod_access モジュールにおけるアクセス制限を回避される脆弱性 Apache HTTP Server に含まれている mod_access には、 Allow/Deny ディレクティブでネットマスクを省略して IP アドレスを指定した場合、ディレクティブで指定したルールを適切に適用しない脆弱性が存在します。 CVE-2003-0993 7816 CVE-2003-0993 74066 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000069.html 2004-03-07 2007-04-01 View