CVE-2003-0020

Apache HTTP Server 1.3.0-1.3.30 - Terminal Escape Sequence Injection in Error Logs

Title source: llm

Description

Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.

References (38)

Core 38

Core References

Broken Link vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-243.html

Third Party Advisory vendor-advisory x_refsource_apple

http://marc.info/?l=bugtraq&m=108369640424244&w=2

Broken Link vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1

Third Party Advisory vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=108731648532365&w=2

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-139.html

Broken Link vendor-advisory x_refsource_trustix

http://www.trustix.org/errata/2004/0027

Third Party Advisory mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=108437852004207&w=2

Mailing List, Third Party Advisory vendor-advisory x_refsource_slackware

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-244.html

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200405-22.xml

Broken Link vendor-advisory x_refsource_mandrake

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:050

Third Party Advisory mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=104612710031920&w=2

Broken Link vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/11412.php

Broken Link vendor-advisory x_refsource_trustix

http://www.trustix.org/errata/2004/0017

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A150

Third Party Advisory vendor-advisory x_refsource_mandrake

http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4114

Broken Link mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/9930

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-083.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-104.html

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100109

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-082.html