exploits , vulnerabilities , articles , Apache Error Log Escape Sequence Injection Vulnerability

Title	Apache Error Log Escape Sequence Injection Vulnerability
Published	2004-03-20-12:00AM
Updated	2004-12-03-03:10PM
Class	Input Validation Error
CVE	CAN-2003-0020 CVE-2003-0020
Remote	Yes
Local	No
Credit	The individual responsible for the disclosure of this issue is currently not known.
Vulnerable	Turbolinux Turbolinux Desktop 10.0 Sun Solaris 9.0 _x86 Sun Solaris 9.0 Sun Solaris 8.0 _x86 Sun Solaris 8.0 OpenBSD OpenBSD 3.5 OpenBSD OpenBSD 3.4 OpenBSD OpenBSD current HP Webproxy A.02.10 HP HPUX B.11.04 HP Webproxy A.02.00 HP HPUX B.11.04 HP VirtualVault A.04.70 HP HPUX B.11.04 HP VirtualVault A.04.60 HP HPUX B.11.04 HP VirtualVault A.04.50 HP HPUX B.11.04 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X 10.3.3 Apple Mac OS X 10.2.8 Apache Software Foundation Apache 2.0.48 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 S.u.S.E. Linux 8.1 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 x86_64 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Apache Software Foundation Apache 2.0.47 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.5 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 Apache Software Foundation Apache 2.0.46 RedHat Desktop 3.0 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 3 Trustix Secure Linux 2.0 Apache Software Foundation Apache 2.0.45 Apple Mac OS X 10.0 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.4 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.5 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.6 Conectiva Linux 9.0 Apache Software Foundation Apache 2.0.44 Apache Software Foundation Apache 2.0.43 Apache Software Foundation Apache 2.0.42 Gentoo Linux 1.2 Gentoo Linux 1.4 _rc1 Apache Software Foundation Apache 2.0.41 Apache Software Foundation Apache 2.0.40 RedHat Linux 8.0 RedHat Linux 9.0 i386 Terra Soft Solutions Yellow Dog Linux 3.0 Apache Software Foundation Apache 2.0.39 Apache Software Foundation Apache 2.0.38 Apache Software Foundation Apache 2.0.37 Apache Software Foundation Apache 2.0.36 Apache Software Foundation Apache 2.0.35 Apache Software Foundation Apache 2.0.32 Apache Software Foundation Apache 2.0.28 Beta Apache Software Foundation Apache 2.0.28 Apache Software Foundation Apache 2.0 a9 Apache Software Foundation Apache 2.0 Apache Software Foundation Apache 1.3.29 Apple Mac OS X 10.2.7 Apple Mac OS X 10.3.5 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.3.5 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 OpenPKG OpenPKG 2.0 Apache Software Foundation Apache 1.3.28 Conectiva Linux 8.0 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 OpenBSD OpenBSD 3.4 OpenPKG OpenPKG 1.3 Apache Software Foundation Apache 1.3.27 HP HPUX (VVOS) 11.0 4 HP VirtualVault 4.5 HP VirtualVault 4.6 HP Webproxy 2.0 Immunix Immunix OS 7 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc OpenBSD OpenBSD 3.3 OpenPKG OpenPKG Current RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux Advanced Work Station 2.1 SGI IRIX 6.5.19 Apache Software Foundation Apache 1.3.26 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 OpenPKG OpenPKG 1.1 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 Apache Software Foundation Apache 1.3.25 Apache Software Foundation Apache 1.3.24 OpenBSD OpenBSD 3.1 Oracle Oracle HTTP Server 9.0.1 Oracle Oracle HTTP Server 9.2 .0 Oracle Oracle9i Application Server 1.0.2 Oracle Oracle9i Application Server 1.0.2 .1s Oracle Oracle9i Application Server 1.0.2 .2 Oracle Oracle9i Application Server 9.0.2 Slackware Linux 8.1 Unisphere Networks SDX300 2.0.3 Apache Software Foundation Apache 1.3.23 IBM AIX 4.3 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc RedHat Linux 7.3 RedHat Linux 7.3 i386 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.0 i386 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 Apache Software Foundation Apache 1.3.22 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 OpenPKG OpenPKG 1.0 RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 Apache Software Foundation Apache 1.3.20 HP HPUX 11.20 HP HPUX 11.22 MandrakeSoft Single Network Firewall 7.2 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc SGI IRIX 6.5.12 SGI IRIX 6.5.12 f SGI IRIX 6.5.12 m SGI IRIX 6.5.13 SGI IRIX 6.5.13 f SGI IRIX 6.5.13 m SGI IRIX 6.5.14 SGI IRIX 6.5.14 f SGI IRIX 6.5.14 m SGI IRIX 6.5.15 SGI IRIX 6.5.16 SGI IRIX 6.5.17 SGI IRIX 6.5.18 Slackware Linux 8.0 Sun Cobalt Control Station 4100CS Sun Cobalt RaQ 550 Sun Solaris 9.0 Sun Solaris 9.0 _x86 Sun Solaris 9.0 _x86 Update 2 Sun SunOS 5.9 Sun SunOS 5.9 _x86 Apache Software Foundation Apache 1.3.19 Apple Mac OS X 10.0.3 Caldera OpenLinux 2.4 Debian Linux 2.3 Digital (Compaq) TRU64/DIGITAL UNIX 4.0 f Digital (Compaq) TRU64/DIGITAL UNIX 4.0 g Digital (Compaq) TRU64/DIGITAL UNIX 5.0 EnGarde Secure Linux 1.0.1 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 4.2 HP HPUX 10.20 HP HPUX 11.0 HP HPUX 11.0 4 HP HPUX 11.11 HP Secure OS software for Linux 1.0 HP VirtualVault 4.5 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.1 NetBSD NetBSD 1.5 NetBSD NetBSD 1.5.1 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 3.0 RedHat Linux 6.2 RedHat Linux 7.0 RedHat Linux 7.1 S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.4 alpha S.u.S.E. Linux 6.4 i386 S.u.S.E. Linux 6.4 ppc S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 i386 S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 sparc S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 x86 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.2 i386 SCO eDesktop 2.4 SCO eServer 2.3.1 SGI IRIX 6.5.8 SGI IRIX 6.5.9 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.17 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc OpenBSD OpenBSD 2.8 S.u.S.E. Linux 7.1 Apache Software Foundation Apache 1.3.14 EnGarde Secure Linux 1.0.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 SGI IRIX 6.5 SGI IRIX 6.5.1 SGI IRIX 6.5.2 SGI IRIX 6.5.3 SGI IRIX 6.5.4 SGI IRIX 6.5.5 SGI IRIX 6.5.6 SGI IRIX 6.5.7 SGI IRIX 6.5.8 SGI IRIX 6.5.9 SGI IRIX 6.5.10 SGI IRIX 6.5.11 Apache Software Foundation Apache 1.3.12 NetScreen NetScreenGlobal PRO Express Policy Manager Server NetScreen NetScreenGlobal PRO Policy Manager Server OpenBSD OpenBSD 2.8 RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 sparc Sun Cobalt ManageRaQ v2 3599BD Sun Cobalt Qube3 4000WG Sun Cobalt RaQ XTR 3500R Sun Cobalt RaQ4 3001R Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.9 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc NetScreen NetScreenGlobal PRO Express Policy Manager Server NetScreen NetScreenGlobal PRO Policy Manager Server Sun Solaris 8.0 Sun Solaris 8.0 _x86 Sun SunOS 5.8 Sun SunOS 5.8 _x86 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.6 Sun Cobalt ManageRaQ3 3000Rmr Sun Cobalt RaQ3 3000R Sun Cobalt Velociraptor Apache Software Foundation Apache 1.3.4 BSDI BSD/OS 4.0 Apache Software Foundation Apache 1.3.3 RedHat Linux 5.2 alpha RedHat Linux 5.2 i386 RedHat Linux 5.2 sparc Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3 Apple Mac OS X 10.1 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.5 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.8 Apple Mac OS X 10.3 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3.2 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3.2 Microsoft Windows 2000 Professional Microsoft Windows NT 4.0
Not Vulnerable	Apache Software Foundation Apache 2.0.49 S.u.S.E. Linux Personal 9.1 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Apache Software Foundation Apache 1.3.31 OpenPKG OpenPKG Current
Code	No exploit is required to injection escape sequences into Apache error logs.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability
2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities
2009-12-17 ManageEngine Password Manager Pro Cross Site Scripting Vulnerability
2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities
2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities