Lucene search

K
osvGoogleOSV:DSA-1583-1
HistoryMay 20, 2008 - 12:00 a.m.

gnome-peercast - several vulnerabilities

2008-05-2000:00:00
Google
osv.dev
7

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.882 High

EPSS

Percentile

98.2%

Several remote vulnerabilities have been discovered in GNOME PeerCast,
the GNOME interface to PeerCast, a P2P audio and video streaming
server. The Common Vulnerabilities and Exposures project identifies the
following problems:

  • CVE-2007-6454
    Luigi Auriemma discovered that PeerCast is vulnerable to a heap
    overflow in the HTTP server code, which allows remote attackers to
    cause a denial of service and possibly execute arbitrary code via a
    long SOURCE request.
  • CVE-2008-2040
    Nico Golde discovered that PeerCast, a P2P audio and video streaming
    server, is vulnerable to a buffer overflow in the HTTP Basic
    Authentication code, allowing a remote attacker to crash PeerCast or
    execute arbitrary code.

For the stable distribution (etch), these problems have been fixed in
version 0.5.4-1.1etch0.

gnome-peercast has been removed from the unstable distribution (sid).

We recommend that you upgrade your gnome-peercast package.

CPENameOperatorVersion
gnome-peercasteq0.5.4-1.1

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.882 High

EPSS

Percentile

98.2%