CVE-2004-1123: Medium severity apple quicktime streaming server vulnerability

Published Dec 5, 2004

Updated

Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.

Affected Software

35 affected components

Apple Quicktime Streaming Server=4.1.1

Apple Darwin Streaming Server=5.0.1

Apple Darwin Streaming Server=4.1.3

Apple Mac OS X Server=10.3.2

Apple iOS and macOS=10.2.5

Apple Mac OS X Server=10.2.2

Apple iOS and macOS=10.2.7

Apple iOS and macOS=10.2.8

Apple Mac OS X Server=10.2.4

Apple iOS and macOS=10.2.1

Apple Mac OS X Server=10.3.5

Apple iOS and macOS=10.3.1

Apple iOS and macOS=10.3.5

Apple Mac OS X Server=10.3.3

Apple Mac OS X Server=10.2.7

Apple Mac OS X Server=10.2.3

Apple iOS and macOS=10.2.4

Apple Mac OS X Server=10.3.4

Apple iOS and macOS=10.3.2

Apple iOS and macOS=10.2.2

Apple Mac OS X Server=10.2.5

Apple iOS and macOS=10.3.6

Apple Mac OS X Server=10.3

Apple Mac OS X Server=10.2.6

Apple Mac OS X Server=10.2

Apple Mac OS X Server=10.2.1

Apple Mac OS X Server=10.3.1

Apple iOS and macOS=10.3.4

Apple iOS and macOS=10.3.3

Apple iOS and macOS=10.2.6

Apple iOS and macOS=10.2.3

Apple Mac OS X Server=10.2.8

Apple iOS and macOS=10.2

Apple iOS and macOS=10.3

Apple Mac OS X Server=10.3.6

Remediation

Patch Available

http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities

Event History

Dec 5, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1123?

CVE-2004-1123 is classified as a denial of service vulnerability that allows remote attackers to crash the Darwin Streaming Server.

How do I fix CVE-2004-1123?

To fix CVE-2004-1123, it is recommended to update the Darwin Streaming Server to a version that is patched against this vulnerability.

What versions are affected by CVE-2004-1123?

CVE-2004-1123 affects Darwin Streaming Server 5.0.1 and possibly earlier versions, along with various versions of Apple QuickTime Streaming Server.

What type of attack is related to CVE-2004-1123?

CVE-2004-1123 is related to a denial of service attack which can be launched through a specially crafted DESCRIBE request.

Are there any workarounds for CVE-2004-1123?

Temporary workarounds for CVE-2004-1123 may include restricting access to the streaming server or implementing network security measures to filter traffic.