Unrated severityNVD Advisory· Published Mar 7, 2003· Updated Jun 16, 2026

CVE-2003-0051

Description

parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter.

Affected products

Apple Inc./Darwin Streaming Server
cpe:2.3:a:apple:darwin_streaming_server:4.1.2:*:*:*:*:*:*:*
Apple Inc./Quicktime Streaming Server2 versions
cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*
- (no CPE)range: = 4.1.1
Apple Inc./Darwin Streaming Administration Serverllm-fuzzy
Range: = 4.1.2

Patches

Vulnerability mechanics

References

www.iss.net/security_center/static/11402.phpnvdVendor Advisory
lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txtnvd
marc.infonvd
www.securityfocus.com/bid/6956nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000