CVE-2003-0051 parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NUL...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.2 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
References
- lists.apple.com
- 20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities mailing-list
- quicktime-darwin-path-disclosure(11402) vdb-entry vendor-advisory
- 6956 vdb-entry