CVE-2003-0052 parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.2 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
References
- lists.apple.com
- 20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities mailing-list
- quicktime-darwin-directory-disclosure(11403) vdb-entry vendor-advisory
- 6955 vdb-entry