Icecast / libshout Multiple Remote Overflows

The remote server runs a version of Icecast, an open source streaming audio server, which is older than version 1.3.9. Icecast and the libshout library are affected by a remote buffer overflow because they do not properly check bounds of data send from clients. As a result of this vulnerability, ...

Icecast MP3 Client HTTP GET Request Remote Overflow

The remote server runs a version of Icecast, an open source streaming audio server, which is older than version 1.3.12. This version is affected by a remote buffer overflow because it does not properly check bounds of data sent from clients. As a result of this vulnerability, it is possible for a...

Icecast Encoded Traversal Arbitrary File Access

The remote server runs a version of Icecast, an open source streaming audio server, which is version 1.3.10 or older. These versions are affected by a directory traversal flaw because the application fails to properly sanitize user-supplied input. An attacker could send a specially crafted URL to...

Icecast Crafted URI Remote DoS

The remote server runs a version of Icecast, an open source streaming audio server that is older than version 1.3.11. This version is affected by a remote denial of service because Icecast server does not properly sanitize user-supplied input. A remote attacker could send a specially crafted URL,...

Icecast Multiple Unspecified Remote Overflows

The remote server runs a version of Icecast, an open source streaming audio server, which is older than version 1.3.10. This version is affected by a remote buffer overflow. As a result of this vulnerability, it is possible for a remote attacker to execute arbitrary code with the privilege of the...

Icecast HTTP Basic Authorization Remote Overflow DoS

The remote server runs Icecast 2.0.0, an open source streaming audio server. This version is affected by a remote denial of service. A remote attacker could send a specially crafted URL, with a long string passed in an Authorization header that will result in a loss of availability for the servic...

IceCast array overflow

Large number of headers in request leads to array overflow...

Code execution in Icecast 2.0.1

Luigi Auriemma Application: Icecast http://www.icecast.org Versions: = 2.0.1 Platforms: only Win32 seems vulnerable but other platforms could be affected in some conditions Bug: array overflow Risk: critical Exploitation: remote Date: 28 September 2004 Author: Luigi Auriemma e-mail:...

Debian DSA-089-2 : icecast-server - remote root exploit (and others)

The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems : - if a client added a / after the filename of a file to be downloaded the server would crash - by escaping dots as %2E it was possible to circumvent security measures and...

Debian DSA-541-1 : icecast-server - missing escape

Markus Worle discovered a cross site scripting problem in status-display list.cgi of the icecast internal webserver, an MPEG layer III streaming server. The UserAgent variable is not properly htmlescaped so that an attacker could cause the client to execute arbitrary Java script commands...

icecast -- HTTP header overflow

It is possible to execute remote code simply using HTTP request plus 31 headers followed by a shellcode that will be executed directly...

Icecast < 2.0.2 Multiple HTTP Headers Remote Overflow

Binary data 2335.prm...

Icecast HTTP Header Processing Remote Overflow

The remote web server runs Icecast version 2.0.1 or older. Such versions are affected by an HTTP header buffer overflow vulnerability that may allow an attacker to execute arbitrary code on the remote host with the privileges of the Icecast server process. To exploit this flaw, an attacker needs ...

CVE-2004-0781

CVE-2004-0781 describes an XSS vulnerability in Icecast’s icecast-server (list.cgi) affecting 1.3.12 and older, where an attacker can inject script via the UserAgent parameter. Connected sources corroborate an XSS issue in ICECast versions around 1.3.12 (and older) caused by improper input saniti...

CVE-2004-0781

Cross-site scripting XSS vulnerability in list.cgi in the Icecast internal web server icecast-server 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter...

GLSA-200405-10 : Icecast denial of service vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-10 Icecast denial of service vulnerability There is an out-of-bounds read error in the web interface of Icecast when handling Basic Authorization requests. This vulnerability can theoretically be exploited by sending a...

Icecast list.cgi User-Agent XSS

The remote server runs a version of Icecast that is as old or older than version 1.3.12. This version is affected by a cross-site scripting vulnerability in the status display functionality. This issue is due to a failure of the application to properly sanitize user-supplied input. As a result of...

DSA-541 icecast-server - cross site scripting

Bulletin has no description...

icecast crossite scripting

Crossite scripting in User-Agent...

[SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 541-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2004 http://www.debian.org/security/faq -...