Lucene search
HistoryJan 19, 2005 - 5:00 a.m.
CVE-2004-1373
cve
2004
1373
format string vulnerability
shoutcast
denial of service
application crash
execute arbitrary code
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.972 High
EPSS
Percentile
99.8%
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
Affected configurations
Node
nullsoftshoutcast_serverMatch1.9.4linux
ORnullsoftshoutcast_serverMatch1.9.4mac_os_x
ORnullsoftshoutcast_serverMatch1.9.4win32
| CPE | Name | Operator | Version |
|---|---|---|---|
| nullsoft:shoutcast_server | nullsoft shoutcast server | eq | 1.9.4 |
Related
gentoo
gentoo
Shoutcast Server: Remote code execution
2005-01-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against SHOUTcast Format String Vulnerability
2006-03-26 00:00:00
SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)
2009-10-18 00:00:00
SHOUTcast Filename Format String (CVE-2004-1373)
2009-10-18 00:00:00
nessus
nessus
GLSA-200501-04 : Shoutcast Server: Remote code execution
2005-02-14 00:00:00
SHOUTcast Server Filename Handling Format String
2004-12-28 00:00:00
saint
saint
SHOUTcast filename format string vulnerability
2006-05-17 00:00:00
SHOUTcast filename format string vulnerability
2006-05-17 00:00:00
SHOUTcast filename format string vulnerability
2006-05-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200501-04 (Shoutcast-server-bin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200501-04 (Shoutcast-server-bin)
2008-09-24 00:00:00
cvelist
cvelist
CVE-2004-1373
2005-01-19 05:00:00
canvas
canvas
Immunity Canvas: SHOUTCAST_FS
2004-12-23 05:00:00
nvd
nvd
CVE-2004-1373
2004-12-23 05:00:00
packetstorm
packetstorm
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
2009-11-26 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.972 High
EPSS
Percentile
99.8%
Related for CVE-2004-1373