VULNERABILITY INTELLIGENCE
CVE-2003-1418
CVSS score4.3 MEDIUM
EPSS probability6.58%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID).
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor