Apple QuickTime/Darwin Streaming Server Directory Traversal Vulnerability

Bugtraq ID:	8258
Class:	Input Validation Error
CVE:	CVE-2003-0425
Remote:	Yes
Local:	No
Published:	Jul 23 2003 12:00AM
Updated:	Mar 19 2015 08:46AM
Credit:	Discovery is credited to Rapid7.
Vulnerable:	Apple Quicktime Streaming Server 4.1.3 + Apple Mac OS X 10.3.2 + Apple Mac OS X 10.2.8 + Apple Mac OS X Server 10.3.2 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3 + Apple Mac OS X Server 10.3 + Apple Mac OS X Server 10.2.8 + Apple Mac OS X Server 10.2.8 Apple Darwin Streaming Server 4.1.3 + Apple Mac OS X 10.3.2 + Apple Mac OS X 10.2.8 + Apple Mac OS X Server 10.3.2 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3 + Apple Mac OS X Server 10.3 + Apple Mac OS X Server 10.2.8 + Apple Mac OS X Server 10.2.8
Not Vulnerable:

Apple QuickTime/Darwin Streaming Server Directory Traversal Vulnerability

It has been reported that QuickTime/Darwin Streaming Server is prone to a directory traversal vulnerability that may allow remote users to retrieve arbitrary files residing on the filesystem. This vulnerability may be possible to exploit using "/.../" sequences within the request sent to the server.

This vulnerability was reported to affect QuickTime/Darwin Streaming Server 4.1.3e and earlier on Windows.

Apple QuickTime/Darwin Streaming Server Directory Traversal Vulnerability

This vulnerability can be exploited with a web browser.

Apple QuickTime/Darwin Streaming Server Directory Traversal Vulnerability

Solution:
This vulnerability has reportedly been fixed in QuickTime/Darwin version 4.1.3f or later. Upgrades may be obtained from http://developer.apple.com/darwin/projects/streaming/

Apple QuickTime/Darwin Streaming Server Directory Traversal Vulnerability

References:

• Darwin Streaming Server Homepage (Apple)