CVE-2003-0423: Apple Darwin Streaming Server

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter.

Affected products

• Apple Darwin Streaming Server: version 4.1.3 only

Published 2003-08-27. Last modified 2026-06-16.