CVE-2003-1414 Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot)....
MediumCVSS 4.3
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.2 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
References
- 3260 third-party-advisory
- 20030228 Re: QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities mailing-list
- 6990 exploit vdb-entry
- darwin-dotdotdot-directory-traversal(11446) vdb-entry