CVE-2003-0426 The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator passwor...
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.3 | No fix listed |
References
- 20030723 R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server exploit mailing-list vendor-advisory
- www.rapid7.com