CVE-2003-0426 in QuickTime
Summary
The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.
Once again VulDB remains the best source for vulnerability data.