CVE-2003-0051

No fix known EPSS 2%

parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter.

Published 2004-09-01 · CVE record · OSV

Products: apple darwin_streaming_server, apple quicktime_streaming_server