Lucene search

[email protected]CVE-2003-1413

HistoryOct 20, 2007 - 10:00 a.m.

CVE-2003-1413

2007-10-2010:00:00

CWE-22

[email protected]

web.nvd.nist.gov

apple darwin streaming server

cve-2003-1413

remote attackers

file existence

security vulnerability

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.7%

JSON

parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using “…” sequences in the filename parameter and comparing the resulting error messages.

Affected configurations

NVD

Node

appledarwin_streaming_serverMatch4.1.2

applequicktime_streaming_serverMatch4.1.1

CPENameOperatorVersion
apple:darwin_streaming_serverapple darwin streaming servereq4.1.2
apple:quicktime_streaming_serverapple quicktime streaming servereq4.1.1

CPE	Name	Operator	Version
apple:darwin_streaming_server	apple darwin streaming server	eq	4.1.2
apple:quicktime_streaming_server	apple quicktime streaming server	eq	4.1.1

References

securityreason.com/securityalert/3260

www.securityfocus.com/archive/1/313517

www.securityfocus.com/bid/6992

exchange.xforce.ibmcloud.com/vulnerabilities/11445

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.7%

JSON

Related for CVE-2003-1413

cvelist1 nvd1