Description

Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.

Remediation

References

CVE-2003-0020

Related Vulnerabilities

Pega Infinity Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-27654)

WordPress Plugin File Manager Arbitrary File Upload (6.8)

WordPress Plugin Wow Forms-create any form with custom style SQL Injection (2.1)

LimeSurvey Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-42903)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1558)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2003-0020