SHOUTcast DNAS/Win32 1.9.4 - File Request Format String Overflow (Metasploit)

$Id: shoutcastformat.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

SHOUTcast Server 1.9.8Win32 - Cross-Site Request Forgery

SHOUTcast Server 1.9.8Win32 - Cross-Site Request Forgery Exploit Title: HOUTcast Server Version Software Link: http://www.shoutcast.com/download Version: X = 1.9.8/win32 CSRF: Ban Single IP: Ex: IP: p1.p2.p3.p4 http://URL:8000/admin.cgi?mode=banip&ip1=p1&ip2=p2&ip3=p3&ip4=p4&banmsk=255 Ban Whole...

SHOUTcast Server Version <= 1.9.8/win32 CSRF Vulnerability

Exploit for unknown platform in category web applications ========================================================== SHOUTcast Server Version = 1.9.8/win32 CSRF Vulnerability ========================================================== Exploit Title: HOUTcast Server Version = 1.9.8/win32 Cross Site...

SHOUTcast Server 1.9.8/Win32 - Cross-Site Request Forgery

Exploit Title: HOUTcast Server Version Software Link: http://www.shoutcast.com/download Version: X = 1.9.8/win32 CSRF: Ban Single IP: Ex: IP: p1.p2.p3.p4 http://URL:8000/admin.cgi?mode=banip&ip1=p1&ip2=p2&ip3=p3&ip4=p4&banmsk=255 Ban Whole Subnet Ex: IP: p1.p2.p3.0-255...

SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

SHOUTcast Filename Format String (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow

====================================================================== Secunia Research 25/02/2009 - SHOUTcast DNAS Relay Server Buffer Overflow - ====================================================================== Table of Contents Affected...

Shoutcast server buffer overflow

Buffer overflow in DNAS Relay service on master server reply parsing...

SHOUTcast服务器DNAS中继远程溢出漏洞

BUGTRAQ ID: 33904 SHOUTcast是一款网络电台服务器软件，由Nullsoft开发。 SHOUTcast在接收中继主服务器的数据时存在缓冲区溢出漏洞，如果SHOUTcast管理员受骗将服务器用作恶意服务器中继的话，接收数据时就可能溢出静态缓冲区，导致执行任意代码。 Nullsoft Shoutcast Server 1.9.8 厂商补丁： Nullsoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.shoutcast.com/...

Streamripper: Multiple vulnerabilities

Background Streamripper is a tool for extracting and recording mp3 files from a Shoutcast stream. Description Stefan Cornelius from Secunia Research reported multiple buffer overflows in the httpparsescheader, httpgetpls and httpgetm3u functions in lib/http.c when parsing overly long HTTP headers...

Gentoo Security Advisory GLSA 200501-04 (Shoutcast-server-bin)

The remote host is missing updates announced in advisory GLSA 200501-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-05 (shoutcast)

The remote host is missing updates announced in advisory GLSA 200607-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-05 (shoutcast)

The remote host is missing updates announced in advisory GLSA 200607-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-04 (Shoutcast-server-bin)

The remote host is missing updates announced in advisory GLSA 200501-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: shoutcast, linux-shoutcast

The remote host is missing an update to the system as announced in the referenced advisory. VID 67dbe99f-0f09-11db-94f8-00e029485e38 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: shoutcast, linux-shoutcast

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-2814

Cross-site scripting XSS vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2814

Cross-site scripting XSS vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

Cross site scripting

Cross-site scripting XSS vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2813

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...