PT-2003-1674 · Apple · Darwin Streaming Server+1

Published 2003-07-25 · Updated 2011-03-08 · CVE-2003-0502

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Darwin Streaming Server versions prior to 4.1.3g Apple QuickTime versions prior to 4.1.3g

Description: The issue allows remote attackers to cause a denial of service, resulting in a crash. This can be achieved by sending a request to the HTTP port 1220 that includes a .. (dot dot) sequence followed by an MS-DOS device name, such as AUX.

Recommendations: For Darwin Streaming Server versions prior to 4.1.3g, update to version 4.1.3g or later. For Apple QuickTime versions prior to 4.1.3g, update to version 4.1.3g or later.

Exploit

Fix

Related Identifiers

CVE-2003-0502

Affected Products

Darwin Streaming Server

Apple Quicktime

References · 3

• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0502 · Security Note
• http://rapid7.com/advisories/R7-0015.html · Note