CVE-2004-2027

2005-05-1004:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2027

buffer overflow

icecast

remote attackers

denial of service

nvd

6.6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.023 Low

EPSS

Percentile

89.8%

JSON

Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read.

Affected configurations

NVD

Node

icecasticecastMatch1.3.0

icecasticecastMatch1.3.5

icecasticecastMatch1.3.5.1

icecasticecastMatch1.3.7

icecasticecastMatch1.3.7.1

icecasticecastMatch1.3.8

icecasticecastMatch1.3.9

icecasticecastMatch1.3.9.1

icecasticecastMatch1.3.9.2

icecasticecastMatch1.3.10

icecasticecastMatch1.3.10.1

icecasticecastMatch1.3.11

icecasticecastMatch1.3.12

icecasticecastMatch2.0.0

CPENameOperatorVersion
icecast:icecasticecasteq1.3.0
icecast:icecasticecasteq1.3.5
icecast:icecasticecasteq1.3.5.1
icecast:icecasticecasteq1.3.7
icecast:icecasticecasteq1.3.7.1
icecast:icecasticecasteq1.3.8
icecast:icecasticecasteq1.3.9
icecast:icecasticecasteq1.3.9.1
icecast:icecasticecasteq1.3.9.2
icecast:icecasticecasteq1.3.10

CPE	Name	Operator	Version
icecast:icecast	icecast	eq	1.3.0
icecast:icecast	icecast	eq	1.3.5
icecast:icecast	icecast	eq	1.3.5.1
icecast:icecast	icecast	eq	1.3.7
icecast:icecast	icecast	eq	1.3.7.1
icecast:icecast	icecast	eq	1.3.8
icecast:icecast	icecast	eq	1.3.9
icecast:icecast	icecast	eq	1.3.9.1
icecast:icecast	icecast	eq	1.3.9.2
icecast:icecast	icecast	eq	1.3.10