CVE-2003-1414: Path Traversal
Directory traversal vulnerability in parsexml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1414?
CVE-2003-1414 has a moderate severity rating due to its directory traversal vulnerability allowing unauthorized file access.
How do I fix CVE-2003-1414?
To fix CVE-2003-1414, update to the latest version of Apple Darwin Streaming Server or Apple Quicktime Streaming Server that patches this vulnerability.
What systems are affected by CVE-2003-1414?
CVE-2003-1414 affects Apple Darwin Streaming Server version 4.1.2 and Apple Quicktime Streaming Server version 4.1.1.
What kind of attack can be executed using CVE-2003-1414?
An attacker can exploit CVE-2003-1414 to perform directory traversal and access arbitrary files on the server.
Is there a workaround for CVE-2003-1414 if I cannot update?
If updating is not an option, consider disabling the vulnerable service or restricting access to it as a temporary workaround.