CVE-2006-6539: Undefined Security Weakness

Multiple buffer overflows in Winamp Web Interface Wawi 7.5.13 and earlier 1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an a long username or a b crafted packet to the FindBasicAuth function in security.cpp, related to the /browse...

CVE-2006-6512: Undefined Security Weakness

Directory traversal vulnerability in the Browse function /browse URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes "%2F" in the path parameter...

CVE-2006-6513: Undefined Security Weakness

The CControl::Download function /dl URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." dot in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function...

CVE-2006-6514: Undefined Security Weakness

Winamp Web Interface Wawi 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name...