CVE-2003-1413: Apple Darwin Streaming Server

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.

Affected products

• Apple Darwin Streaming Server: version 4.1.2 only
• Apple Quicktime Streaming Server: version 4.1.1 only

Published 2003-12-31. Last modified 2026-06-16.