Vulnerability Details CVE-2003-0050
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.878
EPSS Ranking 99.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt
- http://marc.info/?l=bugtraq&m=104618904330226&w=2
- http://www.iss.net/security_center/static/11401.php
- http://www.securityfocus.com/bid/6954
- http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt
- http://marc.info/?l=bugtraq&m=104618904330226&w=2
- http://www.iss.net/security_center/static/11401.php
- http://www.securityfocus.com/bid/6954
Products affected by CVE-2003-0050
-
cpe:2.3:a:apple:darwin_streaming_server:4.1.2
-
cpe:2.3:a:apple:quicktime_streaming_server:4.1.1