medium4.3Public exploit code
CVE-2003-1414
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to rea…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple QuickTime/Darwin Streaming Server 4.1.x - 'parse_xml.cgi' File Disclosure2003-02-28 · remote · cgi · Verified
Impact
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Darwin Streaming Server | Version 4.1.2 |
| Apple | Quicktime Streaming Server | Version 4.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3260
- http://www.securityfocus.com/archive/1/313517
- http://www.securityfocus.com/bid/6990
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11446
- http://securityreason.com/securityalert/3260
- http://www.securityfocus.com/archive/1/313517
- http://www.securityfocus.com/bid/6990
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11446