What’s Vulnerable › Vulnerabilities

CVE-2004-1123

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-01-10 · updated 2026-06-16

Description

Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.

Affected products

• Apple Darwin Streaming Server: 4.1.3, 5.0.1
• macOS: 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5 (+10)
• Apple Mac Os X Server: 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5 (+10)
• Apple Quicktime Streaming Server: 4.1.1

References

• http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18357
• http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18357

Get alerted when CVE-2004-1123 or the next vulnerability affects your stack