[SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 541-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 541-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2004 http://www.debian.org/security/faq -...

icecast -- Cross-Site Scripting Vulnerability

Caused by improper filtering of HTML code in the status display, it is possible for a remote user to execute scripting code in the target user's browser...

Icecast < 1.3.12-1 HTTP GET Request Remote Overflow

Binary data 2141.prm...

Icecast Server < 1.3.10 Crafted URI Remote DoS

Binary data 2142.prm...

Icecast < 2.0.1 HTTP Basic Authentication Remote Overflow

Binary data 2137.prm...

Icecast Server < 1.3.10 Directory Traversal Arbitrary File Access

Binary data 2143.prm...

Icecast < 1.3.10 print_client() Format String

Binary data 2144.prm...

Icecast Server < 2.0.0 list_directory Function Traversal Directory Enumeration

Binary data 2138.prm...

Icecast < 1.3.12 Multiple Remote Buffer Overflows

Binary data 2139.prm...

Icecast < 1.3.10 Multiple Remote Buffer Overflows

Binary data 2140.prm...

Icecast list.cgi User-Agent XSS

Binary data 2136.prm...

Icecast denial of service vulnerability

Background Icecast is a program that streams audio data to listeners over the Internet. Description There is an out-of-bounds read error in the web interface of Icecast when handling Basic Authorization requests. This vulnerability can theorically be exploited by sending a specially crafted...

IceCast buffer overflow

Authorization: HTTP header buffer overflow...

[Full-Disclosure] Icecast 2.0.0 preauth overflow

There exists a remotely exploitable heap overflow in Icecast 2.0.0. The bug exists in the handling of base64 Authorization request. This bug was found in about 40 seconds during a HTTP audit of the web component of Icecast with the fuzzer SMUDGE http://felinemenace.org/nd/SMUDGE/ People complaine...

CVE-2004-2027

Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service crash via a long Basic Authorization header that triggers an out-of-bounds read...

CVE-2004-2027

Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service crash via a long Basic Authorization header that triggers an out-of-bounds read...

DEBIAN-CVE-2004-2027

Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service crash via a long Basic Authorization header that triggers an out-of-bounds read...

Icecast vulnerable to buffer overflow via long GET request

Overview A remotely exploitable buffer overflow exists in Icecast. Description A remotely exploitable buffer overflow exists in Icecast. By sending on overly long GET request to the server, an attacker can execute arbitrary code with the privileges of the Icecast server, or cause the service to...

CVE-2002-1982

Directory traversal vulnerability in the listdirectory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. dot dot in the GET request, which returns different error messages depending on whether the directory exists or not...