347 matches found
Icecast 2.0.1 (Win32) - Remote Code Execution (2)
/ ICECAST 2.0.1 WiN32 REMOTE EXPLOiT by Luigi Auriemma Modded by: LORDKAOZ OF IMPERATORI TEAM Greetz to marc0z, m3nTe, DarKBad, OuT, FaX Anche se non se lo merita, MeSSiA e eXpLoIt! This exploit will add an Administrator account with USER: X AND PASSWORD: X / include include include ifdef WIN32...
Icecast 2.0.1 (Win32) - Remote Code Execution (1)
Icecast 2.0.1 Win32 - Remote Code Execution 1 / by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder...
Icecast 2.0.1 (Win32) - Remote Code Execution (1)
/ by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder. -------------------------------------------------------------------------...
Icecast <= 2.0.1 Win32 Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ==================================================== Icecast iceexec 127.0.0.1 Icecast nc 127.0.0.1 9999 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:Icecast2 Win32...
Icecast <= 2.0.1 Win32 Remote Code Execution Exploit
No description provided by source. / by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder...
Icecast Encoded Traversal Arbitrary File Access
The remote server runs a version of Icecast, an open source streaming audio server, which is version 1.3.10 or older. These versions are affected by a directory traversal flaw because the application fails to properly sanitize user-supplied input. An attacker could send a specially crafted URL to...
Icecast MP3 Client HTTP GET Request Remote Overflow
The remote server runs a version of Icecast, an open source streaming audio server, which is older than version 1.3.12. This version is affected by a remote buffer overflow because it does not properly check bounds of data sent from clients. As a result of this vulnerability, it is possible for a...
Icecast / libshout Multiple Remote Overflows
The remote server runs a version of Icecast, an open source streaming audio server, which is older than version 1.3.9. Icecast and the libshout library are affected by a remote buffer overflow because they do not properly check bounds of data send from clients. As a result of this vulnerability, ...
Icecast Multiple Unspecified Remote Overflows
The remote server runs a version of Icecast, an open source streaming audio server, which is older than version 1.3.10. This version is affected by a remote buffer overflow. As a result of this vulnerability, it is possible for a remote attacker to execute arbitrary code with the privilege of the...
Icecast Crafted URI Remote DoS
The remote server runs a version of Icecast, an open source streaming audio server that is older than version 1.3.11. This version is affected by a remote denial of service because Icecast server does not properly sanitize user-supplied input. A remote attacker could send a specially crafted URL,...
Icecast HTTP Basic Authorization Remote Overflow DoS
The remote server runs Icecast 2.0.0, an open source streaming audio server. This version is affected by a remote denial of service. A remote attacker could send a specially crafted URL, with a long string passed in an Authorization header that will result in a loss of availability for the servic...
IceCast array overflow
Large number of headers in request leads to array overflow...
Code execution in Icecast 2.0.1
Luigi Auriemma Application: Icecast http://www.icecast.org Versions: = 2.0.1 Platforms: only Win32 seems vulnerable but other platforms could be affected in some conditions Bug: array overflow Risk: critical Exploitation: remote Date: 28 September 2004 Author: Luigi Auriemma e-mail:...
Debian DSA-089-2 : icecast-server - remote root exploit (and others)
The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems : - if a client added a / after the filename of a file to be downloaded the server would crash - by escaping dots as %2E it was possible to circumvent security measures and...
icecast -- HTTP header overflow
It is possible to execute remote code simply using HTTP request plus 31 headers followed by a shellcode that will be executed directly...
Debian DSA-541-1 : icecast-server - missing escape
Markus Worle discovered a cross site scripting problem in status-display list.cgi of the icecast internal webserver, an MPEG layer III streaming server. The UserAgent variable is not properly htmlescaped so that an attacker could cause the client to execute arbitrary Java script commands...
Icecast < 2.0.2 Multiple HTTP Headers Remote Overflow
Binary data 2335.prm...
Icecast HTTP Header Processing Remote Overflow
The remote web server runs Icecast version 2.0.1 or older. Such versions are affected by an HTTP header buffer overflow vulnerability that may allow an attacker to execute arbitrary code on the remote host with the privileges of the Icecast server process. To exploit this flaw, an attacker needs ...
CVE-2004-0781
Cross-site scripting XSS vulnerability in list.cgi in the Icecast internal web server icecast-server 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter...
CVE-2004-0781
CVE-2004-0781 describes an XSS vulnerability in Icecast’s icecast-server (list.cgi) affecting 1.3.12 and older, where an attacker can inject script via the UserAgent parameter. Connected sources corroborate an XSS issue in ICECast versions around 1.3.12 (and older) caused by improper input saniti...