The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote malicious users to use the proxy.
apple mac os x 10.3.9