CVEvulnerability

CVE-2001-1556

5.0 MEDIUM Published 2001-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-532

Description

The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.

Affected configurations

• apache http server (>= 1.3.0 < 1.3.31) • apache http server (>= 2.0.0 < 2.0.49)

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

Referenced by CWE · observed example (1)

  • CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences weakness

References