Signature Detail
Short Name |
APP:QT-SERVER:QT-ARG-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
APP |
Release Date |
2004/08/25 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+ |
APP: Darwin QuickTime Streaming Server Malformed Argument Denial of Service
This signature detects URL requests /view_broadcast.cgi and /parse_xml.cgi sent to a QuickTime Streaming Server. Darwin QuickTime Streaming Server v4.1.3 and earlier versions for all platforms (MacOS X, Linux, Windows) are vulnerable. Attackers can send URL requests that contain malformed arguments to the scripts /view_broadcast.cgi and /parse_xml.cgi, forcing the Streaming Server to reveal information or deny service to legitimate clients.
Extended Description
These vulnerabilities allow a remote attacker to cause a denial of service, or to obtain the contents of the files on the server.
References