| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 1.3.11= 1.3.12= 1.3.13= 1.3.14= 1.3.15= 1.3.16= 1.3.17= 1.3.18= 1.3.19= 1.3.20= 1.3.22= 1.3.23= 1.3.9 |
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free