fkie_cve-2003-0502

GHSA-7854-5v42-f557

VAR-200308-0067

Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421. A remote attacker can use the MS-DOS device name (such as AUX) followed by the .. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

_______________________________________________________________________ Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! _______________________________________________________________________

Rapid7 Advisory R7-0015 Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server

Published: July 22, 2003 Revision: 1.0 http://www.rapid7.com/advisories/R7-0015.html

CVE: CAN-2003-0421, CAN-2003-0422, CAN-2003-0423, CAN-2003-0424, CAN-2003-0425, CAN-2003-0426, CAN-2003-0502

1. Affected system(s):

KNOWN VULNERABLE: o QuickTime/Darwin Streaming Server v4.1.3 for MacOS X o QuickTime/Darwin Streaming Server v4.1.3 for Win32 o QuickTime/Darwin Streaming Server v4.1.3 for Linux

UNKNOWN/NOT TESTED: o other platforms (Solaris)

3. Vendor status and information

Apple http://www.apple.com/

The vendor has been notified and has released fixes for all but…

Most recent entries from all

fkie_cve-2003-0502

GHSA-7854-5v42-f557

gsd-2003-0502

VAR-200308-0067