CVE ID:	CAN-2003-0020
Description:	Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0020 http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html Bugtraq: 20030224 Terminal Emulator Security Issues (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=104612710031920&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=108369640424244&w=2 http://security.gentoo.org/glsa/glsa-200405-22.xml HPdes Security Advisory: SSRT4717 http://marc.theaimsgroup.com/?l=bugtraq&m=108731648532365&w=2 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:050 http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046 RedHat Security Advisories: RHSA-2003:082 http://www.redhat.com/support/errata/RHSA-2003-082.html RedHat Security Advisories: RHSA-2003:083 http://www.redhat.com/support/errata/RHSA-2003-083.html RedHat Security Advisories: RHSA-2003:104 http://www.redhat.com/support/errata/RHSA-2003-104.html RedHat Security Advisories: RHSA-2003:139 http://www.redhat.com/support/errata/RHSA-2003-139.html RedHat Security Advisories: RHSA-2003:243 http://www.redhat.com/support/errata/RHSA-2003-243.html RedHat Security Advisories: RHSA-2003:244 http://www.redhat.com/support/errata/RHSA-2003-244.html http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1 http://www.trustix.org/errata/2004/0017 http://www.trustix.org/errata/2004/0027 Bugtraq: 20040512 [OpenPKG-SA-2004.021] OpenPKG Security Advisory (apache) (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=108437852004207&w=2 XForce ISS Database: apache-esc-seq-injection(11412) http://www.iss.net/security_center/static/11412.php BugTraq ID: 9930 http://www.securityfocus.com/bid/9930 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:150 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4114 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100109

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: