Unrated severityNVD Advisory· Published Mar 7, 2003· Updated Jun 16, 2026

CVE-2003-0054

Description

Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.

Affected products

Apple Inc./Darwin Streaming Server
cpe:2.3:a:apple:darwin_streaming_server:4.1.2:*:*:*:*:*:*:*
Apple Inc./Quicktime Streaming Server2 versions
cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*
- (no CPE)range: =4.1.1
Apple Inc./Darwin Streaming Administration Serverllm-fuzzy
Range: =4.1.2

Patches

Vulnerability mechanics

References

www.iss.net/security_center/static/11405.phpnvdVendor Advisory
lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txtnvd
marc.infonvd
www.securityfocus.com/bid/6960nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000