SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow

This module exploits a format string vulnerability in the Nullsoft SHOUTcast server for Windows. The vulnerability is triggered by requesting a file path that contains format string specifiers. This vulnerability was discovered by Tomasz Trojanowski and Damian Put. Module Options msf use...

SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit

Exploit for linux platform in category remote exploits ======================================================= SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit ======================================================= / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put...

SHOUTcast DNAS/Linux 1.9.4 - Format String Remote Overflow

/ SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put Cyber-Crime Team www.CC-Team.org / / Tested on slackware 9.1 and 10.0 0xbf3feee0 / / When exploit only crash SHOUTcast we should calculate new address: / / / / bash-2.05b$ gdb scserv core / / ... / / gdb x/x $edi / /...

SHOUTcast Media Server Detection

Binary data 1139.prm...

SHOUTcast Server Log Files XSS (deprecated)

Binary data 1527.prm...

Shoutcast Multiple GET Request Remote DoS

Binary data 1520.prm...

CVE-2003-1174

Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via 1 icy-name followed by a long server name or 2 icy-url followed by a long URL...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (1)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 1 source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of...

ShoutCast server 1.9.2/win32

Informations : °°°°°°°°°°°° Language : Microsoft Visual C++ v5.0/v6.0 MFC Bugged Version : ShoutCast server 1.9.2/win32 and less ? Patched version : none Website : http://www.shoutcast.com Problems : DoS if we know the password from the server Objects : °°°°°°° - scserv.exe vulnerable variable:...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (1)

source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (2)

// source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

SHOUTcast Server buffer overflow

buffer overflow on long User-Agent HTTP header in admin.cgi and in processing of internal administration protocol...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (2)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 2 // source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking o...

SHOUTcast Server admin.cgi Long Argument Overflow

The remote SHOUTcast Server crashes when an overly large number of backslashes is passed as an argument to its 'admin.cgi' script. An unauthenticated, remote attacker can leverage this issue to crash the affected service or possibly even execute arbitrary code on the affected host. %NASLMINLEVEL...

SHOUTcast Server Admin Log File XSS

According to its banner, the version of SHOUTcast Server installed on the remote host is earlier than 1.9.5. Such versions do not properly validate user input before storing it in its log file. An attacker may use this flaw to perform a cross-site scripting attack against the administrators of th...

CVE-2002-1470

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable scserv.log file...

CVE-2002-1470

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable scserv.log file...

CVE-2002-1470

SHOUTcast 1.8.9 and earlier is affected. A local attacker can obtain the cleartext administrative password by issuing a GET request to port 8001, which causes the password to be written to the world-readable sc_serv.log file. This exposes credentials via local access and file exposure. No remedia...

CVE-2002-0907

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-"...

CVE-2002-0907

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-"...