Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-0063
HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0063

2004-09-0104:00:00
CWE-150
mitre
web.nvd.nist.gov
49
cve-2003-0063
xterm terminal
xfree86
security vulnerability
command execution
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7.8

Confidence

High

EPSS

0.011

Percentile

84.3%

JSON

The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user’s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.

Affected configurations

Nvd
Node
xfree86_projectx11r6Match4.0
OR
xfree86_projectx11r6Match4.0.1
OR
xfree86_projectx11r6Match4.0.3
OR
xfree86_projectx11r6Match4.1.0
OR
xfree86_projectx11r6Match4.2.0
OR
xfree86_projectx11r6Match4.2.1
VendorProductVersionCPE
xfree86_projectx11r64.0cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*
xfree86_projectx11r64.0.1cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:*
xfree86_projectx11r64.0.3cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:*
xfree86_projectx11r64.1.0cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*
xfree86_projectx11r64.2.0cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*
xfree86_projectx11r64.2.1cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*

Related

cvelist 3
nvd 3
vulnrichment 1
ubuntucve 3
prion 2
debiancve 2
cve 2
nessus 9
openvas 12
fedora 3
github 1
osv 2
securityvulns 2
redhat 1
debian 1
threatpost 1
cvelist
cvelist
CVE-2003-0063
2004-09-01 04:00:00
CVE-2015-8971
2017-01-23 21:00:00
CVE-2008-2383
2009-01-02 00:00:00
nvd
nvd
CVE-2003-0063
2003-03-03 05:00:00
CVE-2015-8971
2017-01-23 21:59:00
CVE-2008-2383
2009-01-02 18:11:09
vulnrichment
vulnrichment
CVE-2003-0063
2004-09-01 04:00:00
ubuntucve
ubuntucve
CVE-2003-0063
2003-03-03 00:00:00
CVE-2015-8971
2017-01-23 00:00:00
CVE-2008-2383
2009-01-02 00:00:00
prion
prion
Code injection
2017-01-23 21:59:00
Crlf injection
2009-01-02 18:11:00
debiancve
debiancve
CVE-2015-8971
2017-01-23 21:59:00
CVE-2008-2383
2009-01-02 18:11:09
cve
cve
CVE-2015-8971
2017-01-23 21:59:00
CVE-2008-2383
2009-01-02 18:11:09
nessus
nessus
Fedora 10 : xterm-238-1.fc10 (2009-0091)
2009-04-23 00:00:00
Fedora 8 : xterm-238-1.fc8 (2009-0154)
2009-01-16 00:00:00
Fedora 37 : kitty (2023-3746647cc3)
2023-07-27 00:00:00
openvas
openvas
Fedora Core 9 FEDORA-2009-0059 (xterm)
2009-01-07 00:00:00
FreeBSD Ports: xterm
2009-01-07 00:00:00
Fedora Core 8 FEDORA-2009-0154 (xterm)
2009-01-07 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: xterm-238-1.fc8
2009-01-07 09:25:00
[SECURITY] Fedora 9 Update: xterm-238-1.fc9
2009-01-07 09:12:14
[SECURITY] Fedora 10 Update: xterm-238-1.fc10
2009-01-07 09:16:50
github
github
SwiftTerm Code Injection vulnerability
2023-07-14 21:58:43
osv
osv
SwiftTerm Code Injection vulnerability
2023-07-14 21:58:43
xfree86 - buffer overflows, denial of service
2003-09-12 00:00:00
securityvulns
securityvulns
[RHSA-2003:067-00] Updated XFree86 packages provide security and bug fixes
2003-06-25 00:00:00
Terminal Emulator Security Issues
2003-02-25 00:00:00
redhat
redhat
(RHSA-2003:065) XFree86 security update
2003-06-25 00:00:00
debian
debian
[SECURITY] [DSA-380-1] New xfree86 packages fix multiple vulnerabilities
2003-09-12 18:55:36
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7.8

Confidence

High

EPSS

0.011

Percentile

84.3%

JSON
Related for CVE-2003-0063
cvelist3nvd3vulnrichment1ubuntucve3prion2debiancve2cve2nessus9openvas12fedora3github1osv2securityvulns2redhat1debian1threatpost1