// For flags

CVE-2003-0050

QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.

parse_xml.cgi en Apple Darwin Streaming Administration Server 4.1.2 y QuickTime Streaming Server 4.1.1 permite a atacantes remotos la ejecución arbitraria de código mediante metacaracteres de shell.

The QuickTime Streaming Server contains a CGI script that is vulnerable to metacharacter injection, allow arbitrary commands to be executed as root.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2003-01-28 CVE Reserved
  • 2003-03-07 CVE Published
  • 2010-07-03 First Exploit
  • 2024-02-08 EPSS Updated
  • 2024-08-08 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Apple
Search vendor "Apple"
 Darwin Streaming Server
Search vendor "Apple" for product "Darwin Streaming Server"
 4.1.2
Search vendor "Apple" for product "Darwin Streaming Server" and version "4.1.2"
-
Affected
Apple
Search vendor "Apple"
 Quicktime Streaming Server
Search vendor "Apple" for product "Quicktime Streaming Server"
 4.1.1
Search vendor "Apple" for product "Quicktime Streaming Server" and version "4.1.1"
-
Affected