Denial of Service Vulnerability in Apple Darwin Streaming Server
CVE-2005-2195

Currently unrated

Key Information:

Vendor
Apple
Status
Darwin Streaming Server
Vendor
CVE Published:
18 July 2005

Summary

The Apple Darwin Streaming Server versions 5.5 and earlier contain a vulnerability that enables remote attackers to initiate a denial of service condition. This can occur when a crafted URL is provided that includes a filename with a .cgi extension and uses reserved MS-DOS device names, such as AUX, CON, PRN, COM1, or LPT1. Exploitation of this vulnerability can lead to an unexpected application crash, disrupting service availability.

References

http://marc.info/?l=bugtraq&m=112126999514361&w=2
mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1014474
vdb-entryx_refsource_SECTRACK
http://secway.org/Advisory/AD20050713.txt
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.