CVE-2003-0050 parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
HighCVSS 7.5
EPSS 68.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.2 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
References
- lists.apple.com
- 20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities mailing-list
- quicktime-darwin-command-execution(11401) vdb-entry vendor-advisory
- 6954 vdb-entry