Unscored CVE-2003-0051 EUVD-2003-0047GHSA-7mvh-9mp8-7293

parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain …

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter.

References

http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt
6956 vdb-entry
20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities mailing-list
quicktime-darwin-path-disclosure(11402) vdb-entry