CVE-2003-0065

The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html	Vendor Advisory
http://marc.info/?l=bugtraq&m=104612710031920&w=2
http://www.iss.net/security_center/static/11414.php	Vendor Advisory
http://www.securityfocus.com/bid/6945
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html	Vendor Advisory
http://marc.info/?l=bugtraq&m=104612710031920&w=2
http://www.iss.net/security_center/static/11414.php	Vendor Advisory
http://www.securityfocus.com/bid/6945

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:national_university_of_singapore:uxterm:2.3:::::::*
	cpe:2.3:a:national_university_of_singapore:uxterm:2.4.1:::::::*

History

No history.

Information

Published : 2003-03-03 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2003-0065

Mitre link : CVE-2003-0065

CVE.ORG link : CVE-2003-0065

JSON object : View

Products Affected

national_university_of_singapore

uxterm

CWE

NVD-CWE-Other

{"id": "CVE-2003-0065", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2003-03-03T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=104612710031920&w=2", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/11414.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/6945", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=104612710031920&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/11414.php", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/6945", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands."}, {"lang": "es", "value": "El emualdor de terminal uxterm permite a atacantes modificar el t\u00edtulo de la ventana mediante cierta secuencia de car\u00e1cter de escape y a continuaci\u00f3n insertarlo de nuevo en la l\u00ednea de comando del terminal del usuario, por ejemplo cuando el usuario ve un fichero conteniendo la secuencia maliciosa, lo que podr\u00eda permitir que el atacante ejecutase comandos arbitrarios."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:national_university_of_singapore:uxterm:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3FE29EC-0AA2-48B6-BF06-C765BC55E4F4"}, {"criteria": "cpe:2.3:a:national_university_of_singapore:uxterm:2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3710D10-9F1A-4DF6-922E-C2EDFE432100"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}