CVE-2003-0083: apache http_server
Vulnerability summary
CVE-2003-0083 is a medium (CVSS 5.0) vulnerability in apache http_server. EPSS estimates a 19.15% chance of exploitation in the next 30 days, higher than 97.3% of scored vulnerabilities.
Timeline
- 28-03-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
19.15%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
+1.74 pp
From 17.41% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apache1 product
- http_server≥ 1.3.0, < 1.3.26 | ≥ 2.0.0, < 2.0.46
Debian1 product
- apache2< 2.0.46
2 vendors · 2 products
References
23 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A151VDB EntrySignatureX Refsource OVALThird Party Advisory
- marc.info?l=bugtraq&m=108034113406858&w=2Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
- www.redhat.com/support/errata/RHSA-2003-139.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- marc.info?l=bugtraq&m=108024081011678&w=2Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
