漏洞信息详情

CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple QuickTime/Darwin Streaming服务器脚本源泄漏漏洞

• CNNVD编号：CNNVD-200308-198
• 危害等级： 低危
  
• CVE编号： CVE-2003-0424
• 漏洞类型： 输入验证
• 发布时间： 2003-08-27
• 威胁类型： 远程
• 更新时间： 2005-10-20
• 厂        商： CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple
• 漏洞来源： Discovery is credi...

漏洞简介

CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple QuickTime/Darwin Streaming服务器4.1.3f之前版本存在漏洞。远程攻击者可以通过在用于脚本（例如view_broadcast.cgi）的HTTP请求后添加编码空间(\\%20)或字符（\\%2e）获得用于脚本的源代码。

漏洞公告

This vulnerability has reportedly been fixed in QuickTime/Darwin version 4.1.3f or later. Upgrades may be obtained from http://developer.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/darwin/projects/streaming/

参考网址

来源: www.rapid7.com 链接:http://www.rapid7.com/advisories/R7-0015.HTML 来源: VULNWATCH 名称: 20030723 R7-0015: Multiple Vulnerabilities CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple QuickTime/Darwin Streaming Server 链接:http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.HTML

受影响实体

• CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple Darwin_streaming_server:4.1.3  

补丁

暂无