Unscored severity · published Mar 3, 2003
CVE-2003-0023
The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RX
Rxvt · Rxvt
2.6.1; 2.6.2; 2.6.3; 2.6.4; 2.7.5; 2.7.6; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0023
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0023
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
marc.info
http://marc.info/?l=bugtraq&m=104612710031920&w=2
Vendor Advisory
http://www.iss.net/security_center/static/11416.php
www.mandrakesoft.com
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:034
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2003-054.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2003-055.html
More from Rxvt
–
CVE-2008-1142
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections
–
CVE-2003-0022
The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g
–
CVE-2003-0066
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the…
–
CVE-2001-1077
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument
–
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized