Vulnerability in Apple Darwin_streaming_server

CVE-2003-0423

parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter.

EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.

Affected products

Apple Darwin_streaming_server — versions 4.1.3
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH, Exploit)
cve@mitre.org (x_refsource_MISC)