Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
CVEs:CVE-2003-0050
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| darwin_streaming_server | affected | apple | — | — |
| quicktime_streaming_server | affected | apple | — | — |
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename.
CVEs:CVE-2003-0055
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| quicktime_darwin_mp3_broadcaster | affected | apple | — | — |
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log ...
CVEs:CVE-2003-0054
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| darwin_streaming_server | affected | apple | — | — |
| quicktime_streaming_server | affected | apple | — | — |
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter.
CVEs:CVE-2003-0051
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| darwin_streaming_server | affected | apple | — | — |
| quicktime_streaming_server | affected | apple | — | — |
Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into a...
CVEs:CVE-2003-0053
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| darwin_streaming_server | affected | apple | — | — |
| quicktime_streaming_server | affected | apple | — | — |
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories.
CVEs:CVE-2003-0052
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| darwin_streaming_server | affected | apple | — | — |
| quicktime_streaming_server | affected | apple | — | — |
TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable that is used to write debugging information.
CVEs:CVE-2003-0088
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.