342 matches found
MGASA-2014-0494 Updated icecast package fixes security vulnerability
Icecast did not properly handle the launching of "scripts" on connect or disconnect of sources. This could result in sensitive information from these scripts leaking to external clients. CVE-2014-9018...
Updated icecast package fixes security vulnerability
Icecast did not properly handle the launching of "scripts" on connect or disconnect of sources. This could result in sensitive information from these scripts leaking to external clients. CVE-2014-9018...
Icecast <= 2.0.1 Win32 Remote Code Execution Exploit (modded)
No description provided by source. / ICECAST 2.0.1 WiN32 REMOTE EXPLOiT by Luigi Auriemma Modded by: LORDKAOZ OF IMPERATORI TEAM Greetz to marc0z, m3nTe, DarKBad, OuT, FaX Anche se non se lo merita, MeSSiA e eXpLoIt! This exploit will add an Administrator account with USER: X AND PASSWORD: X /...
Icecast 1.1.x/1.3.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2932/info Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems. Icecast does not filter encoded characters from URLs when receiving web requests. If a remote attacker crafts a URL...
Icecast 1.3.7/1.3.8 print_client() Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2264/info Versions of icecast up to and including 1.3.8 beta2 exhibit a format string vulnerability in the printclientfunction of utility.c. A malicious user can cause the printf function to overwrite memory at possibly...
Icecast <= 2.0.1 Win32 Remote Code Execution Exploit
No description provided by source. / by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder...
Icecast 2.x - XSL Parser Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12849/info Icecast is reported prone to multiple vulnerabilities. The following individual issues are reported: Icecast XSL parser is reported to be prone to a buffer overflow vulnerability. This issue exists due to a lac...
icecast server 1.3.12 - Directory Traversal information disclosure vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5189/info Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms. An attacker may exploit a directory traversal vulnerability in Icecas...
Icecast (<= 2.0.1) Header Overwrite (win32)
No description provided by source. $Id: icecastheader.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Icecast 1.1.x/1.3.x Slash File Name Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2933/info Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems. Icecast does not sufficiently sanitize user-supplied input, or sanely handle unexpected input. Upon receiving a reque...
Icecast 1.x AVLLib Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4415/info Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms. Icecast does not properly check bounds on data sent from clients...
openSUSE Security Update : icecast (openSUSE-SU-2012:0352-1)
Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-153. The text description of this...
openSUSE Security Update : icecast (openSUSE-SU-2012:0333-1)
Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries CVE-2011-4612. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update icecast-5932. The text description o...
Mandriva Linux Security Advisory : icecast (MDVSA-2013:091)
Updated icecast package fixes security vulnerability : Icecast didn't strip newlines from log entries, therefore allowing users to forge log entries CVE-2011-4612 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandri...
Design/Logic Flaw
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
