{"api_version":"1","generated_at":"2026-07-23T07:03:07+00:00","cve":"CVE-2003-0053","urls":{"html":"https://cve.report/CVE-2003-0053","api":"https://cve.report/api/cve/CVE-2003-0053.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2003-0053","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2003-0053"},"summary":{"title":"CVE-2003-0053","description":"Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.","state":"PUBLISHED","assigner":"mitre","published_at":"2003-03-07 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/6958","name":"http://www.securityfocus.com/bid/6958","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple QuickTime/Darwin Streaming Server Parse_XML.CGI Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt","name":"http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple - Lists.apple.com","mime":"text/html","httpstatus":"200","archivestatus":"401"},{"url":"http://www.iss.net/security_center/static/11404.php","name":"http://www.iss.net/security_center/static/11404.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"ISS X-Force Database:quicktime-darwin-parsexml-xss(11404): QuickTime and Darwin Streaming Server parse_xml.cgi cross-site scripting","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=104618904330226&w=2","name":"http://marc.info/?l=bugtraq&m=104618904330226&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-0053","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0053","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2003","cve_id":"53","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"darwin_streaming_server","cpe6":"4.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2003","cve_id":"53","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"quicktime_streaming_server","cpe6":"4.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T01:43:35.408Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt"},{"name":"6958","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/6958"},{"name":"quicktime-darwin-parsexml-xss(11404)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/11404.php"},{"name":"20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104618904330226&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2003-02-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2008-02-07T00:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt"},{"name":"6958","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/6958"},{"name":"quicktime-darwin-parsexml-xss(11404)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/11404.php"},{"name":"20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=104618904330226&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-0053","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt","refsource":"CONFIRM","url":"http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt"},{"name":"6958","refsource":"BID","url":"http://www.securityfocus.com/bid/6958"},{"name":"quicktime-darwin-parsexml-xss(11404)","refsource":"XF","url":"http://www.iss.net/security_center/static/11404.php"},{"name":"20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=104618904330226&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2003-0053","datePublished":"2004-09-01T04:00:00.000Z","dateReserved":"2003-01-28T00:00:00.000Z","dateUpdated":"2024-08-08T01:43:35.408Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-03-07 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3F40D1E1-10B3-4A7C-A945-A8D74F3DCB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2003","CveId":"53","Ordinal":"1","Title":"CVE-2003-0053","CVE":"CVE-2003-0053","Year":"2003"},"notes":[{"CveYear":"2003","CveId":"53","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.","Type":"Description","Title":"CVE-2003-0053"},{"CveYear":"2003","CveId":"53","Ordinal":"2","NoteData":"2004-09-01","Type":"Other","Title":"Published"},{"CveYear":"2003","CveId":"53","Ordinal":"3","NoteData":"2008-02-06","Type":"Other","Title":"Modified"}]}}}