CVE

Id
6912  
CVE No.
CVE-2003-0083  
Status
Candidate  
Description
Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.  
Phase
Assigned (20030210)  
Votes
NOOP(1) Christey  
Comments
Christey> MANDRAKE:MDKSA-2003:050 | (as suggested by Vincent Danen of Mandrake)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39657 6912 CVE-2003-0083 CONFIRM:http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_log_config.c?only_with_tag=APACHE_1_3_25  View
39658 6912 CVE-2003-0083 CONFIRM:http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/loggers/mod_log_config.c?only_with_tag=APACHE_2_0_BRANCH  View
39659 6912 CVE-2003-0083 REDHAT:RHSA-2003:139  View
39660 6912 CVE-2003-0083 URL:http://www.redhat.com/support/errata/RHSA-2003-139.html  View
39661 6912 CVE-2003-0083 BUGTRAQ:20040325 GLSA200403-04 Multiple security vulnerabilities in Apache 2  View
39662 6912 CVE-2003-0083 URL:http://marc.info/?l=bugtraq&m=108024081011678&w=2  View
39663 6912 CVE-2003-0083 BUGTRAQ:20040325 LNSA-#2004-0006: bug workaround for Apache 2.0.48  View
39664 6912 CVE-2003-0083 URL:http://marc.info/?l=bugtraq&m=108034113406858&w=2  View
39665 6912 CVE-2003-0083 OVAL:oval:org.mitre.oval:def:151  View
39666 6912 CVE-2003-0083 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:151  View
39667 6912 CVE-2003-0083 SECUNIA:8146  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63414 JVNDB-2003-000140 Apache HTTP Server の mod_auth_any における任意のコマンドを実行される脆弱性 Apache HTTP Server の mod_auth_any には、引数をシェルに引き渡す処理の際に、引数に対する妥当性のチェックが適切に行われない脆弱性が存在します。 CVE-2003-0084 6912 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000140.html  View