漏洞信息详情
CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple QuickTime/Darwin Streaming Server远程文件存在泄露漏洞
- CNNVD编号:CNNVD-200312-163
- 危害等级: 低危
- CVE编号: CVE-2003-1413
- 漏洞类型: 路径遍历
- 发布时间: 2003-12-31
- 威胁类型: 远程
- 更新时间: 2003-12-31
- 厂 商: CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple
- 漏洞来源:
.');">Discovery credited...
漏洞简介
CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple Darwin Streaming Server 4.1.1的parse_xml.cgi存在漏洞。远程攻击者可以通过在filename参数中使用“..”序列删存任意文件,并且可以对比产生的错误信息。
漏洞公告
This issue has reportedly been fixed in version 4.1.3 of QuickTime/Darwin Streaming Server. This information has not been confirmed by the vendor.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
参考网址
来源: XF 名称: darwin-dotdot-file-existence(11445) 链接:http://xforce.iss.net/xforce/xfdb/11445 来源: BID 名称: 6992 链接:http://www.securityfocus.com/bid/6992 来源: BUGTRAQ 名称: 20030228 Re: QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities 链接:http://www.securityfocus.com/archive/1/313517 来源: SREASON 名称: 3260 链接:http://securityreason.com/securityalert/3260
受影响实体
- CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple Darwin_streaming_server:4.1.2
- CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple Quicktime_streaming_server:4.1.1
补丁
暂无
![weinxin](http://zone.ci/zone_ci_images/zone.ci.png)
评论