CVE-2014-9091

Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors...

UBUNTU-CVE-2014-9091

Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors...

CVE-2014-9091

CVE-2014-9091 affects Icecast prior to 2.4.0, where supplementary group privileges are not changed when is configured, enabling a local attacker to gain privileges. The issue is documented in GLSA 201412-38 and Gentoo/OpenVAS advisories, which indicate local escalation/privilege information expo...

CVE-2014-9091

Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors...

CVE-2014-9091

Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors...

openSUSE Security Update : icecast (openSUSE-SU-2014:1591-1)

icecast was updated to fix two security issues. These security issues were fixed : - Supplementary groups were not overriden CVE-2014-9091. - Possible leak of on-connect scripts CVE-2014-9018. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : icecast (openSUSE-SU-2014:1593-1)

icecast was updated to fix one security issue. This security issue was fixed : - Possible leak of on-connect scripts CVE-2014-9018. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

DEBIAN-CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

Design/Logic Flaw

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

UBUNTU-CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

CVE-2014-9018

Icecast vulnerable to CVE-2014-9018 (Icecast

CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors...

icecast information disclosure

Server leaks scripts sources...

[ MDVSA-2014:231 ] icecast

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:231 http://www.mandriva.com/en/support/security/ Package : icecast Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Updated icecast package fixes security vulnerability: Icecast di...

icecast: information leak

It was reported that Icecast could possibly leak the contents of on-connect scripts to clients, which may contain sensitive information. If on-connect/on-disconnect scripts are used, file descriptors of the server process remain open and could be written to or read from. Most pressing STDIN,...

Mandriva Linux Security Advisory : icecast (MDVSA-2014:231)

Updated icecast package fixes security vulnerability : Icecast did not properly handle the launching of scripts on connect or disconnect of sources. This could result in sensitive information from these scripts leaking to external clients CVE-2014-9018. %NASLMINLEVEL 70300 C Tenable Network...