CVE-2003-0083

Description

Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.

Risk Information

Base Score
8.2
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS Score
Exploitation Probability
12.356

Associated Vulnerability

VulnerabilityOS Platform
Update Apache to version 2.0.46Windows
Update Apache to version 1.3.27Windows
Vulnerabilities CVE-2002-0392,CVE-2003-0083 are fixed in Apache 1.3.26Windows
Vulnerabilities CVE-2003-0083 are fixed in Apache 2.0.46Windows
Update Apache to version 2.0.46 (For Linux)Linux
Update Apache to version 1.3.27 (For Linux)Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234