PT-2003-1355 · Apache · Apache+1

Publicado 2003-02-24 · Atualizado 2021-07-15 · CVE-2003-0083

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache versions 1.3 before 1.3.25 Apache versions 2.0 before 2.0.46

Description The issue is related to the lack of filtering of terminal escape sequences from access logs, which could facilitate attacks by inserting these sequences into vulnerable terminal emulators.

Recommendations For Apache versions 1.3 before 1.3.25, update to version 1.3.25 or later. For Apache versions 2.0 before 2.0.46, update to version 2.0.46 or later.

Correção

Identificadores relacionados

CVE-2003-0083

Produtos afetados

Apache

Apache Http Server

Referências · 28

• https://httpd.apache.org/security/vulnerabilities_13.html#CVE-2003-0083 · Nota
• https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E · Nota
• http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_log_config.c?only_with_tag=APACHE_1_3_25 · Nota
• https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A151 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0083 · Nota de Segurança
• https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0083 · Nota
• https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E · Nota
• http://redhat.com/support/errata/RHSA-2003-139.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0083 · Aviso do Fabricante