CVE-2003-0424: Apple Darwin Streaming Server

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.

Affected products

• Apple Darwin Streaming Server: version 4.1.3 only

Published 2003-08-27. Last modified 2026-06-16.