|
Under some circumstances, Apache may log invalid hostname information. If a double-reverse DNS lookup is performed but fails, then an invalid hostname may appear in the logs. For example, this may occur if the hostname does not properly resolve to the IP address in the double-reverse DNS lookup. A remote attacker may deliberately exploit this issue to cause spoofed information to be logged by the webserver. |
|