Description
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.
Published: 2004-09-01
Score: 7.5 High
EPSS: 5.0% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046 cve-icon cve-icon
http://issues.apache.org/bugzilla/show_bug.cgi?id=23850 cve-icon cve-icon
http://marc.info/?l=apache-cvs&m=107869603013722 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=108437852004207&w=2 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200405-22.xml cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1 cve-icon cve-icon
http://www.apacheweek.com/features/security-13 cve-icon cve-icon
http://www.securityfocus.com/bid/9829 cve-icon cve-icon
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643 cve-icon cve-icon
http://www.trustix.org/errata/2004/0027 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/15422 cve-icon cve-icon
https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100111 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4670 cve-icon cve-icon
History

No history.

Subscriptions

Apache Http Server
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-08T02:12:35.779Z

Reserved: 2003-12-16T00:00:00.000Z

Link: CVE-2003-0993

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2004-03-29T05:00:00.000

Modified: 2026-04-16T00:27:16.627

Link: CVE-2003-0993

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses