VDB
RHSA-2003%3A139
RHSA-2003%3A139
PUBLISHED
CVSS 8.699999809265137 HIGH
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Linux 9 | |
| Red Hat | Red Hat Linux 8.0 |
Timeline
- Apr 9, 2003 CVE Published
- Nov 21, 2025 CVE Updated
- Aug 7, 2026 Distribution Patch
- Aug 7, 2026 Distribution Patch
- Aug 7, 2026 Security Advisory
- Aug 7, 2026 Security Advisory
- Aug 7, 2026 Security Advisory
- Aug 7, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2003:139 advisory
- http://www.apacheweek.com/issues/03-04-04#security advisory
- http://marc.theaimsgroup.com/?l=bugtraq&m=104931360606484 advisory
- http://www.idefense.com/advisory/04.08.03.txt advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=73428 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=82142 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=82587 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=86254 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_139.json advisory
- https://access.redhat.com/security/cve/CVE-2003-0020 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1616937 issue
- https://www.cve.org/CVERecord?id=CVE-2003-0020 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2003-0020 advisory
- https://access.redhat.com/security/cve/CVE-2003-0083 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1616961 issue
- https://www.cve.org/CVERecord?id=CVE-2003-0083 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2003-0083 advisory
- https://access.redhat.com/security/cve/CVE-2003-0132 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1616977 issue
- https://www.cve.org/CVERecord?id=CVE-2003-0132 advisory
…and 1 more