CVE-2003-0083 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0083
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0083

Description: Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.

CVE Status: Candidate

References: SAID Secunia Advisory: SA8146 REDHAT http://www.redhat.com/support/errata/RHSA-2003-139.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:151 CONFIRM http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/loggers/mod_log_config.c?only_with_tag=APACHE_2_0_BRANCH http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_log_config.c?only_with_tag=APACHE_1_3_25 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=108034113406858&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=108024081011678&w=2

Return to the previous page.