CVE Vulnerabilities

CVE-2003-0022

Published: Mar 03, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The screen dump feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a users terminal, e.g. when the user views a file containing the malicious sequence.

Affected Software

Name Vendor Start Version End Version
Rxvt Rxvt 2.6.1 2.6.1
Rxvt Rxvt 2.6.2 2.6.2
Rxvt Rxvt 2.6.3 2.6.3
Rxvt Rxvt 2.6.4 2.6.4
Rxvt Rxvt 2.7.5 2.7.5
Rxvt Rxvt 2.7.6 2.7.6
Rxvt Rxvt 2.7.7 2.7.7
Rxvt Rxvt 2.7.8 2.7.8

References