Remote Code Execution in Apple Darwin Streaming Administration Server and QuickTime Streaming Server

CVE-2003-0054

Summary

A vulnerability in Apple Darwin Streaming Administration Server and QuickTime Streaming Server allows remote attackers to execute arbitrary code. By crafting a specific request to port 7070 with a malicious script in an argument to the RTSP DESCRIBE method, attackers can insert the script into a log file. This code is later executed when the log is accessed via a web browser, potentially compromising the affected server. Users are advised to apply available patches to mitigate this risk and protect their systems from exploitation.

References