CVE-2003-0070

2003-03-0305:00:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.003

Percentile

69.5%

JSON

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user’s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.

Affected configurations

Nvd

Node

nalin_dahyabhaivteMatch0.11.21

nalin_dahyabhaivteMatch0.12.2

nalin_dahyabhaivteMatch0.14.2

nalin_dahyabhaivteMatch0.15.0

nalin_dahyabhaivteMatch0.16.14

nalin_dahyabhaivteMatch0.17.4

nalin_dahyabhaivteMatch0.20.5

nalin_dahyabhaivteMatch0.22.5

nalin_dahyabhaivteMatch0.24.3

nalin_dahyabhaivteMatch0.25.1

AND

gnomegnome-terminalMatch2.0

gnomegnome-terminalMatch2.2

VendorProductVersionCPE
nalin_dahyabhaivte0.11.21cpe:2.3:a:nalin_dahyabhai:vte:0.11.21:*:*:*:*:*:*:*
nalin_dahyabhaivte0.12.2cpe:2.3:a:nalin_dahyabhai:vte:0.12.2:*:*:*:*:*:*:*
nalin_dahyabhaivte0.14.2cpe:2.3:a:nalin_dahyabhai:vte:0.14.2:*:*:*:*:*:*:*
nalin_dahyabhaivte0.15.0cpe:2.3:a:nalin_dahyabhai:vte:0.15.0:*:*:*:*:*:*:*
nalin_dahyabhaivte0.16.14cpe:2.3:a:nalin_dahyabhai:vte:0.16.14:*:*:*:*:*:*:*
nalin_dahyabhaivte0.17.4cpe:2.3:a:nalin_dahyabhai:vte:0.17.4:*:*:*:*:*:*:*
nalin_dahyabhaivte0.20.5cpe:2.3:a:nalin_dahyabhai:vte:0.20.5:*:*:*:*:*:*:*
nalin_dahyabhaivte0.22.5cpe:2.3:a:nalin_dahyabhai:vte:0.22.5:*:*:*:*:*:*:*
nalin_dahyabhaivte0.24.3cpe:2.3:a:nalin_dahyabhai:vte:0.24.3:*:*:*:*:*:*:*
nalin_dahyabhaivte0.25.1cpe:2.3:a:nalin_dahyabhai:vte:0.25.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nalin_dahyabhai	vte	0.11.21	cpe:2.3:a:nalin_dahyabhai:vte:0.11.21:::::::*
nalin_dahyabhai	vte	0.12.2	cpe:2.3:a:nalin_dahyabhai:vte:0.12.2:::::::*
nalin_dahyabhai	vte	0.14.2	cpe:2.3:a:nalin_dahyabhai:vte:0.14.2:::::::*
nalin_dahyabhai	vte	0.15.0	cpe:2.3:a:nalin_dahyabhai:vte:0.15.0:::::::*
nalin_dahyabhai	vte	0.16.14	cpe:2.3:a:nalin_dahyabhai:vte:0.16.14:::::::*
nalin_dahyabhai	vte	0.17.4	cpe:2.3:a:nalin_dahyabhai:vte:0.17.4:::::::*
nalin_dahyabhai	vte	0.20.5	cpe:2.3:a:nalin_dahyabhai:vte:0.20.5:::::::*
nalin_dahyabhai	vte	0.22.5	cpe:2.3:a:nalin_dahyabhai:vte:0.22.5:::::::*
nalin_dahyabhai	vte	0.24.3	cpe:2.3:a:nalin_dahyabhai:vte:0.24.3:::::::*
nalin_dahyabhai	vte	0.25.1	cpe:2.3:a:nalin_dahyabhai:vte:0.25.1:::::::*