Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Filtered by product Darwin Streaming Server
Total 27 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0423 1 Apple 1 Darwin Streaming Server 2025-04-03 5.0 MEDIUM N/A
parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter.
CVE-2003-0421 1 Apple 1 Darwin Streaming Server 2025-04-03 10.0 HIGH N/A
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502.
CVE-2003-1414 1 Apple 2 Darwin Streaming Server, Quicktime Streaming Server 2025-04-03 4.3 MEDIUM N/A
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
CVE-2004-0169 1 Apple 1 Darwin Streaming Server 2025-04-03 5.0 MEDIUM N/A
QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.
CVE-2004-1087 1 Apple 4 Darwin Streaming Server, Mac Os X, Mac Os X Server and 1 more 2025-04-03 2.1 LOW N/A
Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.
CVE-2004-1123 1 Apple 4 Darwin Streaming Server, Mac Os X, Mac Os X Server and 1 more 2025-04-03 5.0 MEDIUM N/A
Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.
CVE-2003-0426 1 Apple 1 Darwin Streaming Server 2025-04-03 10.0 HIGH N/A
The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.