CVE-2003-0426 — HIGH (10.0)

Vulnerability Description

The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Apple	Darwin Streaming Server	4.1.3

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.htmlExploitVendor Advisory
http://www.rapid7.com/advisories/R7-0015.html
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.htmlExploitVendor Advisory
http://www.rapid7.com/advisories/R7-0015.html

FAQ

What is CVE-2003-0426?

CVE-2003-0426 is a vulnerability with a CVSS score of 10.0 (HIGH). The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator passwor...

How severe is CVE-2003-0426?

CVE-2003-0426 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-0426?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Darwin Streaming Server.