Unscored CVE-2003-0423 EUVD-2003-0417GHSA-x65w-xp74-jp4x

parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable fi…

Published Jul 25, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter.

References

20030723 R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server mailing-list
http://www.rapid7.com/advisories/R7-0015.html