CVE-2003-0502 Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a reque...
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | <= 4.1.3g | No fix listed |
References
- 20030723 R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server exploit mailing-list vendor-advisory
- www.rapid7.com