CVE-2006-6512

Directory traversal vulnerability in the Browse function /browse URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes "%2F" in the path parameter...

CVE-2006-6514

Winamp Web Interface Wawi 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name...

CVE-2006-6512

The CVE-2006-6512 issue affects Winamp Web Interface (Wawi) up to version 7.5.13 and earlier, specifically the Browse function at /browse. The vulnerability is a directory traversal flaw that lets remote authenticated users list arbitrary directories by supplying URL-encoded backslashes ("%2F") i...

CVE-2006-6514

The vulnerability CVE-2006-6514 affects Winamp Web Interface (Wawi) versions 7.5.13 and earlier. It arises from an insufficient comparison to determine whether a directory is located below the application's root directory, enabling remote authenticated users to access certain other directories if...

CVE-2006-6513

The CControl::Download function /dl URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." dot in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function...

CVE-2006-6539: Undefined Security Weakness

Multiple buffer overflows in Winamp Web Interface Wawi 7.5.13 and earlier 1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an a long username or a b crafted packet to the FindBasicAuth function in security.cpp, related to the /browse...

CVE-2006-6512: Undefined Security Weakness

Directory traversal vulnerability in the Browse function /browse URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes "%2F" in the path parameter...

CVE-2006-6513: Undefined Security Weakness

The CControl::Download function /dl URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." dot in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function...

CVE-2006-6547: Undefined Security Weakness

Buffer overflow in the readAA function in readaa.cpp in Winamp iPod Plugin mlipod 2.00 p19 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long tag in an audible.com audiobook aa file...

CVE-2006-6514: Undefined Security Weakness

Winamp Web Interface Wawi 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name...

Winamp Web接口多个安全漏洞

Winamp Web接口（Wawi）是Winamp的一个开源插件，允许用户通过Web浏览器远程管理媒体播放器。 Wawi的实现后半辈子存在多个安全漏洞，具体如下： ----------------------------------- A FindBasicAuth缓冲区溢出 ----------------------------------- FindBasicAuth函数位于security.cpp，用于解析客户端请求中的Authorization...

Winamp Web Interface multiplse security vulnerabilities

Buffer overflows, directory traversal and protection bypass...

Winamp Web interface 7.5.13 - Multiple Vulnerabilities

Winamp Web interface 7.5.13 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A...

[Full-disclosure] Multiple vulnerabilities in Winamp Web Interface 7.5.13

Luigi Auriemma Application: Winamp Web Interface http://www.flippet.org/wawi/ Versions: = 7.5.13 Platforms: Windows Winamp plugin Bugs: A buffer-overflow in FindBasicAuth B browsing directory traversal C buffer-overflow in the browse, download and load functions D file extension check bypassing i...

winamp7513.txt

Luigi Auriemma Application: Winamp Web Interface http://www.flippet.org/wawi/ Versions: = 7.5.13 Platforms: Windows Winamp plugin Bugs: A buffer-overflow in FindBasicAuth B browsing directory traversal C buffer-overflow in the browse, download and load functions D file extension check bypassing i...

Update Protection against AOL Nullsoft Winamp Ultravox Heap Overflow Vulnerability

A heap-based buffer overflow vulnerability was detected in the multimedia player AOL Nullsoft Winamp. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system...

Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC

No description provided by source. / Nullsoft Winamp 5.31 Ultravox "Ultravox-Max-Msg" Heap Overflow Dos POC by cocoruderfrankruderathotmail.com,2006/10/30 use like "winampunsv.exe ultravox-max-msgvalue",then the winampunsvsimple ultravox server will listen on tcp port 80,when winamp connect the...

Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC

Exploit for unknown platform in category dos / poc =============================================================== Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A...

NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service (PoC)

/ Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A" "Ultravox-SID: 13381\x0D\x0A" "Ultravox-Avg-Bitrate: 16000\x0D\x0A" "Ultravox-Max-Bitrate: 24000\x0D\x0A"...

NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service (PoC)

NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service PoC / Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A" "Ultravox-SID: 13381\x0D\x0A"...