CVE-2003-0426

3 documents3 sources
Severity
10.0CRITICAL
EPSS
0.9%
top 24.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Darwin Streaming Server
Timeline
PublishedAug 27
Latest updateApr 29

Description

The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-9cjc-2xqw-jc7g: The installation of Apple QuickTime / Darwin Streaming Server before 4↗2022-04-29
▶
CVEList
CVE-2003-0426: The installation of Apple QuickTime / Darwin Streaming Server before 4↗2003-07-25
▶