CVE-2003-0424

UNKNOWN

Apple QuickTime / Darwin Streaming Server before 4

Published Jul 25, 2003

Modified 1 years ago

Details

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.

References

WEB

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html

WEB

http://www.rapid7.com/advisories/R7-0015.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2003-0424

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

NoneI:N

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:P/I:N/A:N

Ecosystems

Timeline

PublishedJul 25, 2003

ModifiedAug 8, 2024