CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2003-0502

Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.6%

CVSS Severity

CVSS v2 Score 10.0

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html
http://www.rapid7.com/advisories/R7-0015.html
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html
http://www.rapid7.com/advisories/R7-0015.html

Products affected by CVE-2003-0502

Apple » Darwin Streaming Server » Version: N/A

cpe:2.3:a:apple:darwin_streaming_server:-
Apple » Darwin Streaming Server » Version: 4.1

cpe:2.3:a:apple:darwin_streaming_server:4.1
Apple » Darwin Streaming Server » Version: 4.1.2

cpe:2.3:a:apple:darwin_streaming_server:4.1.2
Apple » Darwin Streaming Server » Version: 4.1.3

cpe:2.3:a:apple:darwin_streaming_server:4.1.3
Apple » Darwin Streaming Server » Version: 4.1.3g

cpe:2.3:a:apple:darwin_streaming_server:4.1.3g

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0502

Products

Pricing

Contact Us