CVE-2004-0169: apple darwin_streaming_server

EPSS trend

Probability

3.47%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.47% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

lists.apple.com/archives/security-announce/2004/Feb/msg00000.htmlVendor AdvisoryX Refsource APPLE
www.idefense.com/application/poi/display?id=75&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSE
www.osvdb.org/6826VDB EntryX Refsource OSVDB
www.kb.cert.org/vuls/id/460350Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/bid/9735VDB EntryX Refsource BIDPatchVendor Advisory
www.osvdb.org/6837VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/15291VDB EntryX Refsource XF

Related vulnerabilities

CVE-2003-1413appledarwin_streaming_server+11.21%19y ago20-10-2007 10:00parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.CVE-2003-1414appledarwin_streaming_server+14.46%19y ago20-10-2007 10:00Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.CVE-2003-0502appledarwin_streaming_server3.43%23y ago25-07-2003 04:00Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.CVE-2003-0054appledarwin_streaming_server+12.34%22y ago01-09-2004 04:00Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.CVE-2003-0426appledarwin_streaming_server3.43%23y ago25-07-2003 04:00The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.CVE-2003-0424appledarwin_streaming_server1.42%23y ago25-07-2003 04:00Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.

All vulnerabilities indarwin_streaming_server

CVE-2004-0169: apple darwin_streaming_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References