Apple Terminal vulnerabilities

4 CVEs affecting Apple Terminal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0189, published 2011-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-1342, published 2005-05-04. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
CVE-2002-1898, published 2002-12-31. High severity, CVSS 7.2. EPSS: 3.2% chance of exploitation in the next 30 days. Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.
CVE-2005-1341, published 2005-05-04. Medium severity, CVSS 5.1. EPSS: 3.1% chance of exploitation in the next 30 days. Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.
CVE-2011-0189, published 2011-03-23. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle…