CVE-2003-1418
Published Dec 31, 2003
Last updated 7 years ago
Overview
- Description
- Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID).
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2720E06-1B0E-4BFE-8C85-A17E597BB151"
},
{
"criteria": "cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EE1DECF-36C7-4968-8B7A-7A2034C2A957"
},
{
"criteria": "cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B67BD173-8517-4E97-BC65-D9657C63601A"
},
{
"criteria": "cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B392A96F-FD2F-4073-8EED-EB31E1F20FE4"
},
{
"criteria": "cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E130104B-86F5-411E-8AC0-9B4B780BCA00"
},
{
"criteria": "cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E62E621-74DA-4D99-A79C-AD2B85896A2B"
}
],
"operator": "OR"
}
]
}
]