Unrated severityNVD Advisory· Published Feb 5, 2010· Updated Apr 29, 2026
CVE-2003-1582
CVE-2003-1582
Description
Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
Affected products
2- cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*
- Range: =6.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.securityfocus.com/archive/1/313867nvdExploit
News mentions
0No linked articles in our index yet.