Unscored CVE-2003-0502 EUVD-2003-0496GHSA-7854-5v42-f557

Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) seq…

Published Jul 25, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.

References

20030723 R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server mailing-list
http://www.rapid7.com/advisories/R7-0015.html