Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.

The remote server is running a version of Apache 2.x which is older than 2.0.45.
This version is vulnerable to various flaw :
- There is a denial of service attack which may allow the attacker to disable this server remotely.
- The httpd process leaks file descriptors to child processes such as CGI scripts. An attacker who has the ability to execute arbitrary CGI scripts on this server (include PHP code) would be able to write arbitrary data in the files pointed to (in particular the log files). 

The target host is running an Apache web server that allows for the injection of arbitrary escape sequences into its error logs.  An attacker might use this vulnerability in an attempt to exploit similar vulnerabilities in terminal emulators.  

A memory leak was discovered in Apache 2.0 through 2.0.44 that can allow a remote attacker to cause a significant denial of service (DoS) by sending requests containing a lot of linefeed characters to the server.

As well, Apache does not filter terminal escape sequences from its log files, which could make it easy for an attacker to insert those sequences into the error and access logs, which could possibly be viewed by certain terminal emulators with vulnerabilities related to escape sequences.

After upgrading these packages, be sure to restart the httpd server by executing :

service httpd restart

The remote host appears to be running a version of Apache 2.0.x prior to 2.0.43. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this vulnerability by making a POST request to files in a folder with both WebDAV and CGI enabled. 

*** Note that Nessus solely relied on the version number
*** of the remote server to issue this warning. This might
*** be a false positive.

ID	Name	Product	Family	Severity
1443	Apache < 2.0.46 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
1221	Apache < 1.3.31 / 2.0.49 Error Log Escape Sequence Injection	Nessus Network Monitor	Web Servers	high
14034	Mandrake Linux Security Advisory : apache2 (MDKSA-2003:050)	Nessus	Mandriva Local Security Checks	medium
11408	Apache 2.0.x < 2.0.43 Multiple Vulnerabilities (Log Injection, Source Disc.)	Nessus	Web Servers	medium

Detections

Analytics

CVE-2003-0083

critical

Tenable Plugins

high

high

medium

medium