PT-2003-1614 · Apple · Darwin Streaming Server

Published 2003-07-25 · Updated 2008-09-10 · CVE-2003-0423

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Darwin Streaming Server versions prior to 4.1.3g

Description: The issue allows remote attackers to obtain the source code for parseable files. This is achieved through the filename parameter in the parse xml.cgi component.

Recommendations: For versions prior to 4.1.3g, update to version 4.1.3g or later to resolve the issue. As a temporary workaround, consider restricting access to the parse xml.cgi component to minimize the risk of exploitation. Avoid using the filename parameter in the affected component until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2003-0423

Affected Products

Darwin Streaming Server

References · 3

• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0423 · Security Note
• http://rapid7.com/advisories/R7-0015.html · Note