PT-2003-1612 · Apple · Darwin Streaming Server+1

Published 2003-07-25 · Updated 2008-09-05 · CVE-2003-0421

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Darwin Streaming Server versions prior to 4.1.3f Apple QuickTime versions prior to 4.1.3f (note: the exact version range for QuickTime is not specified, but it is mentioned alongside Darwin Streaming Server)

Description: The issue allows remote attackers to cause a denial of service (crash) via an MS-DOS device name in a request to the HTTP port 1220.

Recommendations: For Darwin Streaming Server versions prior to 4.1.3f, update to version 4.1.3f or later. For Apple QuickTime, since the exact fix version is not specified, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2003-0421

Affected Products

Darwin Streaming Server

Apple Quicktime

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-0421 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html · Vendor Advisory
• http://rapid7.com/advisories/R7-0015.html · Note