CVE-2007-0748: apple darwin_streaming_server

EPSS trend

Probability

6.49%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.49% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

osvdb.org/35975VDB EntryX Refsource OSVDB
www.vupen.com/english/advisories/2007/1770VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/34225VDB EntryX Refsource XF
lists.apple.com/archives/Security-announce/2007/May/msg00002.htmlVendor AdvisoryX Refsource APPLE
www.securityfocus.com/bid/23918VDB EntryX Refsource BID
labs.idefense.com/intelligence/vulnerabilities/display.php?id=533Third Party AdvisoryX Refsource IDEFENSEPatch
docs.info.apple.com/article.html?artnum=305495X Refsource CONFIRMPatch
www.securitytracker.com/id?1018047VDB EntryX Refsource SECTRACK
secunia.com/advisories/25193Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory

Related vulnerabilities

CVE-2003-1413appledarwin_streaming_server+11.21%19y ago20-10-2007 10:00parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.CVE-2003-1414appledarwin_streaming_server+14.46%19y ago20-10-2007 10:00Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.CVE-2003-0502appledarwin_streaming_server3.43%23y ago25-07-2003 04:00Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.CVE-2003-0054appledarwin_streaming_server+12.34%22y ago01-09-2004 04:00Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.CVE-2003-0426appledarwin_streaming_server3.43%23y ago25-07-2003 04:00The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.CVE-2003-0424appledarwin_streaming_server1.42%23y ago25-07-2003 04:00Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.

All vulnerabilities indarwin_streaming_server

CVE-2007-0748: apple darwin_streaming_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References