CVEvulnerability

CVE-2003-1413

4.3 MEDIUM Published 2003-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-22

Description

parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.

Affected configurations

• apple darwin streaming server 4.1.2 • apple quicktime streaming server 4.1.1

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References