CVE-2003-0054

3 documents3 sources
Severity
7.5HIGH
EPSS
0.8%
top 26.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Darwin Streaming ServerApple Quicktime Streaming Server
Timeline
PublishedMar 7
Latest updateApr 29

Description

Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-pg23-xpwh-jqj6: Apple Darwin Streaming Administration Server 4↗2022-04-29
▶
CVEList
CVE-2003-0054: Apple Darwin Streaming Administration Server 4↗2004-09-01
▶