PT-2003-1355 · Apache · Apache+1

Published 2003-02-24 · Updated 2021-07-15 · CVE-2003-0083

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache versions 1.3 before 1.3.25 Apache versions 2.0 before 2.0.46

Description The issue is related to the lack of filtering of terminal escape sequences from access logs, which could facilitate attacks by inserting these sequences into vulnerable terminal emulators.

Recommendations For Apache versions 1.3 before 1.3.25, update to version 1.3.25 or later. For Apache versions 2.0 before 2.0.46, update to version 2.0.46 or later.

Fix

Related Identifiers

CVE-2003-0083

Affected Products

Apache

Apache Http Server

References · 28

• https://nvd.nist.gov/vuln/detail/CVE-2003-0083 · Security Note
• http://redhat.com/support/errata/RHSA-2003-139.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0083 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0083 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0083 · Vendor Advisory
• https://httpd.apache.org/security/vulnerabilities_13.html#CVE-2003-0083 · Note
• https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E · Note
• http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_log_config.c?only_with_tag=APACHE_1_3_25 · Note
• https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A151 · Note
• https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Note