Quicktime Streaming Server (Apple) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2005-01-10. Vendor: Apple.
CVEs of Quicktime Streaming Server
- CVE-2004-1123 - CVSS 5 (medium), 2005-01-10: Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with…
- CVE-2004-1083 - CVSS 7.5 (high), 2004-12-03: Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case…
- CVE-2004-1088 - CVSS 7.5 (high), 2004-12-02: Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication…
- CVE-2004-1084 - CVSS 5 (medium), 2004-12-02: Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names…
- CVE-2004-1087 - CVSS 2.1 (low), 2004-12-02: Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security…
- CVE-2004-1081 - CVSS 2.1 (low), 2004-12-02: The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local…
- CVE-2004-1086 - CVSS 7.5 (high), 2004-12-02: Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.
- CVE-2004-1089 - CVSS 4.6 (medium), 2004-12-02: Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.
- CVE-2004-1085 - CVSS 2.1 (low), 2004-12-02: Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system…
- CVE-2003-1413 - CVSS 4.3 (medium), 2003-12-31: parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the…
- CVE-2003-1414 - CVSS 4.3 (medium), 2003-12-31: Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to…
- CVE-2003-0052 - CVSS 5 (medium), 2003-03-07: parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories.
- CVE-2003-0051 - CVSS 5 (medium), 2003-03-07: parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path…
- CVE-2003-0054 - CVSS 7.5 (high), 2003-03-07: Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port…
- CVE-2003-0050 - CVSS 7.5 (high), 2003-03-07: parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via…
- CVE-2003-0053 - CVSS 4.3 (medium), 2003-03-07: Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows…
