Lucene search

K
cveMitreCVE-2003-0424
HistoryAug 27, 2003 - 4:00 a.m.

CVE-2003-0424

2003-08-2704:00:00
mitre
web.nvd.nist.gov
27
cve-2003-0424
apple quicktime
darwin streaming server
remote attack
source code exposure
http request manipulation
script security
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.013

Percentile

85.9%

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.

Affected configurations

Nvd
Node
appledarwin_streaming_serverMatch4.1.3
VendorProductVersionCPE
appledarwin_streaming_server4.1.3cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.013

Percentile

85.9%

Related for CVE-2003-0424