What’s Vulnerable › Vulnerabilities

CVE-2003-1413

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-12-31 · updated 2026-06-16
• Weakness: CWE-22

Description

parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.

Affected products

• Apple Darwin Streaming Server: 4.1.2
• Apple Quicktime Streaming Server: 4.1.1

References

• http://securityreason.com/securityalert/3260
• http://www.securityfocus.com/archive/1/313517
• http://www.securityfocus.com/bid/6992
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11445
• http://securityreason.com/securityalert/3260
• http://www.securityfocus.com/archive/1/313517
• http://www.securityfocus.com/bid/6992
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11445

Get alerted when CVE-2003-1413 or the next vulnerability affects your stack