Information Disclosure Vulnerability in Apple QuickTime / Darwin Streaming Server

CVE-2003-0424 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.

Learn more about our Cis Benchmark Audit For Server Software.