CVE-2003-0423 parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter.
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.3 | No fix listed |
References
- 20030723 R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server exploit mailing-list vendor-advisory
- www.rapid7.com