Every CVE Search/ Get API key

CVE-2003-0021

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary...

5.0 MediumFix available

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.

Exploit likelihood

1.21%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.

Record
CVE-2003-0021
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.

Record
CVE-2003-0021
Updated
2026-11-02
EUVDEUVD-2003-0021 No score

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.

Record
EUVD-2003-0021
Updated
2026-11-03
GitHub AdvisoriesGHSA-v6jh-gv6q-3h4r No score

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary...

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.

Record
GHSA-v6jh-gv6q-3h4r
Updated
2026-11-02
OSV No score

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.

Record
CVE-2003-0021
Updated
2026-11-02
OSVDEBIAN-CVE-2003-0021 No score

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.

Record
DEBIAN-CVE-2003-0021
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
eterm
Debian:12
before 0.9.2-1
0.9.2-1
eterm
Debian:14
before 0.9.2-1, plus listed versions
0.7-10.8.10-100.8.7-0.40.8.7-0.4.10.9.2-0pre20020429030.9.2-0pre2002042903.3
0.9.2-1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0021 is a medium vulnerability (CVSS 5.0) in Michael Jennings Eterm, published March 3, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.21%, the 68th percentile. Fixed in eterm 0.9.2-1.

References

MoveEnter Open