CVE-2003-1414

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 2003
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2003

CVE-2003-14156.8NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encCVE-2003-14164.3BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service (CPU consumption) via a long (1) ls or (2) cwd command.CVE-2003-14174.4nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allCVE-2003-14184.3Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which rCVE-2003-14194.3Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the CVE-2003-14204.3Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbiCVE-2003-14214.3Unspecified vulnerability in mod_mysql_logger shared object in SuckBot 0.006 allows remote attackers to cause a denial of service (seg faultCVE-2003-142210.0Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to gain privileges via CVE-2003-14235.0Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtCVE-2003-14246.8message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connCVE-2003-142510.0guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.CVE-2003-14263.3Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include a
CVE-2003-1414: Medium severity, CVSS 4.3 | Vulnix