PT-2003-1612 · Apple · Darwin Streaming Server+1

Publicado 2003-07-25 · Atualizado 2008-09-05 · CVE-2003-0421

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Darwin Streaming Server versions prior to 4.1.3f Apple QuickTime versions prior to 4.1.3f (note: the exact version range for QuickTime is not specified, but it is mentioned alongside Darwin Streaming Server)

Description: The issue allows remote attackers to cause a denial of service (crash) via an MS-DOS device name in a request to the HTTP port 1220.

Recommendations: For Darwin Streaming Server versions prior to 4.1.3f, update to version 4.1.3f or later. For Apple QuickTime, since the exact fix version is not specified, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-0421

Produtos afetados

Darwin Streaming Server

Apple Quicktime

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-0421 · Nota de Segurança
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html · Aviso do Fabricante
• http://rapid7.com/advisories/R7-0015.html · Nota