Unscored CVE-2003-0424 EUVD-2003-0418GHSA-9xmq-7rwm-gr8h

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded …

Published Jul 25, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.

References

20030723 R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server mailing-list
http://www.rapid7.com/advisories/R7-0015.html