PT-2003-1674 · Apple · Darwin Streaming Server+1

Publicado 2003-07-25 · Atualizado 2011-03-08 · CVE-2003-0502

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Darwin Streaming Server versions prior to 4.1.3g Apple QuickTime versions prior to 4.1.3g

Description: The issue allows remote attackers to cause a denial of service, resulting in a crash. This can be achieved by sending a request to the HTTP port 1220 that includes a .. (dot dot) sequence followed by an MS-DOS device name, such as AUX.

Recommendations: For Darwin Streaming Server versions prior to 4.1.3g, update to version 4.1.3g or later. For Apple QuickTime versions prior to 4.1.3g, update to version 4.1.3g or later.

Exploit

Correção

Identificadores relacionados

CVE-2003-0502

Produtos afetados

Darwin Streaming Server

Apple Quicktime

Referências · 3

• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0502 · Nota de Segurança
• http://rapid7.com/advisories/R7-0015.html · Nota