CVE-2003-0426

Apple QuickTime/Darwin Streaming Server <4.1.3f - Privilege Escalation

Title source: llm
STIX 2.1

Description

The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.

References (2)

Core 2
Core References
Exploit, Vendor Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html
Third Party Advisory x_refsource_misc
http://www.rapid7.com/advisories/R7-0015.html

Scores

EPSS 0.0343
EPSS Percentile 87.7%

Details

Status published
Products (1)
apple/darwin_streaming_server 4.1.3
Published Aug 27, 2003
Tracked Since Feb 18, 2026