CVE-2003-0054 Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.2 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
References
- lists.apple.com
- 20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities mailing-list
- quicktime-darwin-describe-xss(11405) vdb-entry vendor-advisory
- 6960 vdb-entry