Vulners
Lucene search
Icecast 1.1.x/1.3.x - Slash File Name Denial of Service
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | Icecast Server < 1.3.10 Crafted URI Remote DoS | 18 Aug 200400:00 | – | nessus |
| Debian DSA-089-2 : icecast-server - remote root exploit (and others) | 29 Sep 200400:00 | – | nessus |
| FreeBSD : icecast 1.x multiple vulnerabilities (5e92e8a2-5d7b-11d8-80e3-0020ed76ef5a) | 13 Jul 200500:00 | – | nessus |
| Icecast Crafted URI Remote DoS | 1 Oct 200400:00 | – | nessus |
 | icecast 1.x multiple vulnerabilities | 28 Apr 200200:00 | – | freebsd |
 | CVE-2001-1083 | 25 Jun 200204:00 | – | cve |
 | CVE-2001-1083 | 25 Jun 200204:00 | – | cvelist |
 | CVE-2001-1083 | 26 Jun 200104:00 | – | nvd |
 | ICECast < 1.3.11 Crafted URL DoS Vulnerability | 3 Nov 200500:00 | – | openvas |
| FreeBSD Ports: icecast | 4 Sep 200800:00 | – | openvas |
10
source: https://www.securityfocus.com/bid/2933/info
Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems.
Icecast does not sufficiently sanitize user-supplied input, or sanely handle unexpected input. Upon receiving a request from a user for a file that ends with a slash or period, the server will crash. The behaviour occurs when the remote attacker adds an '/', '\' or '.' to the end the URL they craft to request the file. The request of an existing file is not necessary, as the Icecast server will fail regardless.
http://localhost:8000/file//
NOTE: File is interpreted by Icecast as the 'root' directory and anything after 'file/' indicates the file request. The character '/' triggers the denial of service.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.09628