CVE:CVE-2003-1413
CNNVD:CNNVD-200312-163
Apple Darwin Streaming Server 4.1.1的parse_xml.cgi存在漏洞。远程攻击者可以通过在filename参数中使用“..”序列删存任意文件，并且可以对比产生的错误信息。
solution:Upgrade apple darwin_streaming_server to a higher version than 4.1.2,and avoid the version 4.1.2; Upgrade apple quicktime_streaming_server to a higher version than 4.1.1,and avoid the version 4.1.1