DS
Product
Darwin Streaming Server
27
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Darwin Streaming Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1083 | 7.5 | Dec 3 | Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which… Affected: 4.1.3; 5.0.1 |
| CVE-2007-0748 | – | May 13 | Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID… Affected: 4.1.2; 5.0.1; 5.5.4; 4.1.3 |
| CVE-2007-0749 | – | May 13 | Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote… Affected: 4.1.2; 5.0.1; 5.5.4; 4.1.3 |
| CVE-2005-2195 | – | Jul 18 | Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a .cgi extension and an… Affected: through 5.5 |
| CVE-2004-1123 | – | Jan 10 | Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that… Affected: 4.1.3; 5.0.1 |
| CVE-2004-1085 | – | Dec 2 | Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk… Affected: 4.1.3; 5.0.1 |
| CVE-2004-1084 | – | Dec 2 | Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple… Affected: 4.1.3; 5.0.1 |
| CVE-2004-1089 | – | Dec 2 | Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users Affected: 4.1.3; 5.0.1 |
| CVE-2004-1081 | – | Dec 2 | The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard… Affected: 4.1.3; 5.0.1 |
| CVE-2004-1088 | – | Dec 2 | Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information Affected: 4.1.3; 5.0.1 |
| CVE-2004-1087 | – | Dec 2 | Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user Affected: 4.1.3; 5.0.1 |
| CVE-2004-1086 | – | Dec 2 | Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file Affected: 4.1.3; 5.0.1 |
| CVE-2004-0169 | – | Mar 15 | QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which… Affected: 4.1.3 |
| CVE-2003-1414 | – | Dec 31 | Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files… Affected: 4.1.2 |
| CVE-2003-1413 | – | Dec 31 | parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and… Affected: 4.1.2 |
| CVE-2003-0421 | – | Aug 27 | Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g Affected: 4.1.3 |
| CVE-2003-0502 | – | Aug 27 | Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a Affected: through 4.1.3g |
| CVE-2003-0426 | – | Aug 27 | The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the… Affected: 4.1.3 |
| CVE-2003-0425 | – | Aug 27 | Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a Affected: 4.1.3 |
| CVE-2003-0424 | – | Aug 27 | Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or Affected: 4.1.3 |
| CVE-2003-0423 | – | Aug 27 | parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter Affected: 4.1.3 |
| CVE-2003-0422 | – | Aug 27 | Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via a request to view_broadcast.cgi that does not contain the… Affected: 4.1.3 |
| CVE-2003-0051 | – | Mar 7 | parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's… Affected: 4.1.2 |
| CVE-2003-0054 | – | Mar 7 | Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script… Affected: 4.1.2 |
| CVE-2003-0053 | – | Mar 7 | Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to… Affected: 4.1.2 |
| CVE-2003-0052 | – | Mar 7 | parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories Affected: 4.1.2 |
| CVE-2003-0050 | – | Mar 7 | parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters Affected: 4.1.2 |
Showing 27