CVE-2002-2103: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days.

Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.

Affected products

• Apache HTTP Server: version 1.3.9 only; version 1.3.11 only; version 1.3.12 only; version 1.3.13 only; version 1.3.14 only; version 1.3.15 only; …

Published 2002-12-31. Last modified 2026-06-16.