{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2003-02-24T00:00:00", "descriptions": [{"lang": "en", "value": "The \"screen dump\" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2009-01-02T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20030224 Terminal Emulator Security Issues", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=104612710031920&w=2"}, {"name": "RHSA-2003:054", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2003-054.html"}, {"name": "6938", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/6938"}, {"name": "RHSA-2003:055", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2003-055.html"}, {"name": "terminal-emulator-screen-dump(11413)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "http://www.iss.net/security_center/static/11413.php"}, {"name": "MDKSA-2003:034", "tags": ["vendor-advisory", "x_refsource_MANDRAKE"], "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:034"}, {"name": "20030224 Terminal Emulator Security Issues", "tags": ["mailing-list", "x_refsource_VULNWATCH"], "url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2003-0022", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The \"screen dump\" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20030224 Terminal Emulator Security Issues", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=104612710031920&w=2"}, {"name": "RHSA-2003:054", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2003-054.html"}, {"name": "6938", "refsource": "BID", "url": "http://www.securityfocus.com/bid/6938"}, {"name": "RHSA-2003:055", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2003-055.html"}, {"name": "terminal-emulator-screen-dump(11413)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/11413.php"}, {"name": "MDKSA-2003:034", "refsource": "MANDRAKE", "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:034"}, {"name": "20030224 Terminal Emulator Security Issues", "refsource": "VULNWATCH", "url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:36:25.311Z"}, "title": "CVE Program Container", "references": [{"name": "20030224 Terminal Emulator Security Issues", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=104612710031920&w=2"}, {"name": "RHSA-2003:054", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2003-054.html"}, {"name": "6938", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/6938"}, {"name": "RHSA-2003:055", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2003-055.html"}, {"name": "terminal-emulator-screen-dump(11413)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "http://www.iss.net/security_center/static/11413.php"}, {"name": "MDKSA-2003:034", "tags": ["vendor-advisory", "x_refsource_MANDRAKE", "x_transferred"], "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:034"}, {"name": "20030224 Terminal Emulator Security Issues", "tags": ["mailing-list", "x_refsource_VULNWATCH", "x_transferred"], "url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2003-0022", "datePublished": "2004-09-01T04:00:00", "dateReserved": "2003-01-07T00:00:00", "dateUpdated": "2024-08-08T01:36:25.311Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:rxvt:rxvt:2.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "E5CE4F28-5C30-4A54-8A4B-3FA6B01F1467", "vulnerable": true}, {"criteria": "cpe:2.3:a:rxvt:rxvt:2.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "5BA71D83-EA61-4B68-9D71-40E660C8E9E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:rxvt:rxvt:2.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "EB750075-F614-40BA-B26D-CA3826A1B865", "vulnerable": true}, {"criteria": "cpe:2.3:a:rxvt:rxvt:2.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "31FE05CF-F5F3-4F11-853A-36D4A4CA8FD1", "vulnerable": true}, {"criteria": "cpe:2.3:a:rxvt:rxvt:2.7.5:*:*:*:*:*:*:*", "matchCriteriaId": "16BC9337-A01B-402D-A9A0-AAE0B49355BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:rxvt:rxvt:2.7.6:*:*:*:*:*:*:*", "matchCriteriaId": "ED803842-E280-4998-BD7C-CF8048304FE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:rxvt:rxvt:2.7.7:*:*:*:*:*:*:*", "matchCriteriaId": "779E9DE5-58AC-4441-8925-3ADC1E042A8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:rxvt:rxvt:2.7.8:*:*:*:*:*:*:*", "matchCriteriaId": "287104DA-18C9-400C-B23C-CD569E5F11C5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The \"screen dump\" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence."}, {"lang": "es", "value": "La caracter\u00edstica \"volcado de pantalla\" en rxvt 2.7.8 permite a atacantes sobreescribir ficheros arbitrarios mediante una cierta secuencia de escape de caracteres cuando se hace eco en el terminal de un usuario, por ejemplo cuando el usuario ve un fichero conteniendo la secuencia maliciosa."}], "id": "CVE-2003-0022", "lastModified": "2016-10-18T02:28:26.933", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2003-03-03T05:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=104612710031920&w=2"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.iss.net/security_center/static/11413.php"}, {"source": "cve@mitre.org", "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:034"}, {"source": "cve@mitre.org", "url": "http://www.redhat.com/support/errata/RHSA-2003-054.html"}, {"source": "cve@mitre.org", "url": "http://www.redhat.com/support/errata/RHSA-2003-055.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/6938"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2003:055", "cpe": "cpe:/o:redhat:enterprise_linux:2.1", "product_name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1", "release_date": "2003-03-11T00:00:00Z"}, {"advisory": "RHSA-2003:055", "cpe": "cpe:/o:redhat:enterprise_linux:2.1", "product_name": "Red Hat Enterprise Linux ES version 2.1", "release_date": "2003-03-11T00:00:00Z"}, {"advisory": "RHSA-2003:055", "cpe": "cpe:/o:redhat:enterprise_linux:2.1", "product_name": "Red Hat Enterprise Linux WS version 2.1", "release_date": "2003-03-11T00:00:00Z"}, {"advisory": "RHSA-2003:054", "cpe": "cpe:/o:redhat:linux:6.2", "product_name": "Red Hat Linux 6.2", "release_date": "2003-03-17T00:00:00Z"}, {"advisory": "RHSA-2003:054", "cpe": "cpe:/o:redhat:linux:7.0", "product_name": "Red Hat Linux 7.0", "release_date": "2003-03-17T00:00:00Z"}, {"advisory": "RHSA-2003:054", "cpe": "cpe:/o:redhat:linux:7.1", "product_name": "Red Hat Linux 7.1", "release_date": "2003-03-17T00:00:00Z"}, {"advisory": "RHSA-2003:054", "cpe": "cpe:/o:redhat:linux:7.2", "product_name": "Red Hat Linux 7.2", "release_date": "2003-03-17T00:00:00Z"}, {"advisory": "RHSA-2003:054", "cpe": "cpe:/o:redhat:linux:7.3", "product_name": "Red Hat Linux 7.3", "release_date": "2003-03-17T00:00:00Z"}, {"advisory": "RHSA-2003:055", "cpe": "cpe:/o:redhat:enterprise_linux:2.1", "product_name": "Red Hat Linux Advanced Workstation 2.1", "release_date": "2003-03-11T00:00:00Z"}], "bugzilla": {"description": "security flaw", "id": "1616938", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616938"}, "csaw": false, "details": ["The \"screen dump\" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence."], "name": "CVE-2003-0022", "public_date": "2003-02-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2003-0022\nhttps://nvd.nist.gov/vuln/detail/CVE-2003-0022"], "threat_severity": "Important"}