Vulnerability Name: | CVE-2003-0050 (CCN-11401) | ||||||||
Assigned: | 2003-02-24 | ||||||||
Published: | 2003-02-24 | ||||||||
Updated: | 2016-10-18 | ||||||||
Summary: | parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: CCN Type: @stake, Inc. Security Advisory A032403-1 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities Source: MITRE Type: CNA CVE-2003-0050 Source: CCN Type: AppleCare Knowledge Base Document 70171 Mac OS X Server Update 10.2.4: Information and Download Source: CCN Type: AppleCare Knowledge Base Document 70172 Mac OS X Server Update Combined 10.2.4: Information and Download Source: CONFIRM Type: UNKNOWN http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt Source: BUGTRAQ Type: UNKNOWN 20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities Source: XF Type: Vendor Advisory quicktime-darwin-command-execution(11401) Source: CCN Type: OSVDB ID: 10562 Apple Streaming Servers parse_xml.cgi Shell Metacharacter Arbitrary Command Execution Source: BID Type: UNKNOWN 6954 Source: CCN Type: BID-6954 Apple QuickTime/Darwin Streaming Server Command Execution Vulnerability Source: XF Type: UNKNOWN quicktime-darwin-command-execution(11401) Source: CCN Type: metasploit-framework GIT Repository metasploit-framework/qtss_parse_xml_exec.rb at master · rapid7/metasploit-framework · GitHu Source: CCN Type: Rapid7 Vulnerability and Exploit Database QuickTime Streaming Server parse_xml.cgi Remote Execution | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||
BACK |