{"schemaVersion":3,"id":"CVE-2003-0020","aliases":["DEBIAN-CVE-2003-0020"],"status":"published","duplicateOf":null,"title":null,"description":"Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.","dates":{"published":"2004-09-01T04:00:00.000Z","modified":"2024-08-08T01:36:25.351Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.16458,"percentile":0.96954,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.16458},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.16458,"percentile":0.96954}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.16458,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.16458,"percentile":0.96954}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"apache","product":"http_server","name":"http server","label":"http_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.3.0, < 1.3.31","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.0.49","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.3.0, < 1.3.31 | ≥ 2.0.0, < 2.0.49","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"apache-http-server","label":"Apache HTTP Server","category":"server-app"}},"hubHref":"/vendor/apache/http_server"},{"vendor":"debian","product":"apache2","name":"apache2","label":"apache2","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/apache2","purlType":"deb","versions":[{"text":"< 2.0.49","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.49","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-243.html","label":"www.redhat.com/support/errata/RHSA-2003-243.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","label":"marc.info?l=bugtraq&m=108369640424244&w=2","hostname":"marc.info","tags":["Vendor Advisory","X Refsource APPLE","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108731648532365&w=2","label":"marc.info?l=bugtraq&m=108731648532365&w=2","hostname":"marc.info","tags":["Vendor Advisory","X Refsource HP","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-139.html","label":"www.redhat.com/support/errata/RHSA-2003-139.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0027","label":"www.trustix.org/errata/2004/0027","hostname":"www.trustix.org","tags":["Vendor Advisory","X Refsource TRUSTIX","Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108437852004207&w=2","label":"marc.info?l=bugtraq&m=108437852004207&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","label":"www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","hostname":"www.slackware.com","tags":["Vendor Advisory","X Refsource SLACKWARE","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-244.html","label":"www.redhat.com/support/errata/RHSA-2003-244.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-22.xml","label":"security.gentoo.org/glsa/glsa-200405-22.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:050","label":"www.mandrakesoft.com/security/advisories?name=MDKSA-2003:050","hostname":"www.mandrakesoft.com","tags":["Vendor Advisory","X Refsource MANDRAKE","Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=104612710031920&w=2","label":"marc.info?l=bugtraq&m=104612710031920&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/11412.php","label":"www.iss.net/security_center/static/11412.php","hostname":"www.iss.net","tags":["VDB Entry","X Refsource XF","Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0017","label":"www.trustix.org/errata/2004/0017","hostname":"www.trustix.org","tags":["Vendor Advisory","X Refsource TRUSTIX","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A150","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A150","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046","label":"frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046","hostname":"frontal2.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRAKE","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4114","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4114","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html","label":"archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html","hostname":"archives.neohapsis.com","tags":["Mailing List","X Refsource VULNWATCH","Broken Link"]},{"url":"http://www.securityfocus.com/bid/9930","label":"www.securityfocus.com/bid/9930","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-083.html","label":"www.redhat.com/support/errata/RHSA-2003-083.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-104.html","label":"www.redhat.com/support/errata/RHSA-2003-104.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100109","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100109","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-082.html","label":"www.redhat.com/support/errata/RHSA-2003-082.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2003-0020","label":"security-tracker.debian.org/tracker/CVE-2003-0020","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2004-09-01T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-08T01:36:25.351Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":23,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T02:54:19.665Z","stale":false,"partial":false}}