CVE-2003-0064

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-03-03 · updated 2026-06-16

Description

The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 10.20, 10.24, 10.26, 10.30, 10.34, 11.00 (+4)
IBM AIX: 4.3, 4.3.1, 4.3.2, 4.3.3, 5.1, 5.2
Sgi Irix: 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 (+59)
Sun Solaris: 2.5.1, 2.6, 7.0, 8.0, 9.0
Sunos: 5.5.1, 5.7, 5.8

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
http://marc.info/?l=bugtraq&m=104612710031920&w=2
http://www.iss.net/security_center/static/11414.php
http://www.securityfocus.com/advisories/6236
http://www.securityfocus.com/bid/6942
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
http://marc.info/?l=bugtraq&m=104612710031920&w=2
http://www.iss.net/security_center/static/11414.php
http://www.securityfocus.com/advisories/6236
http://www.securityfocus.com/bid/6942

Get alerted when CVE-2003-0064 or the next vulnerability affects your stack