Debian DSA-1597-2 : mt-daapd - multiple vulnerabilities

Three vulnerabilities have been discovered in the mt-daapd DAAP audio server also known as the Firefly Media Server. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2007-5824 Insufficient validation and bounds checking of the Authorization: HTTP...

mt-daapd buffer overflow

Buffer overflow on POST request processing...

[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...

DSA-1597-1 mt-daapd - several vulnerabilities

Bulletin has no description...

Fedora 9 : mt-daapd-0.2.4.2-2.fc9 (2008-4126)

Thu May 15 2008 W. Michael Petullo - 0.2.4.2-2 - Bump epoch. - Wed May 14 2008 W. Michael Petullo - 0.2.4.2-1 - New upstream version. - Remove check-input patch; it's upstream. - Fri Apr 18 2008 W. Michael Petullo - 0.9-0.2.1696 - Apply patch by Nico Golde to fix integer overflow, Bugzilla...

[SECURITY] Fedora 9 Update: mt-daapd-0.2.4.2-2.fc9

The purpose of this project is built the best server software to serve digital music to the Roku Soundbridge and iTunes; to be able to serve the widest variety of digital music content over the widest range of devices...

FreeBSD : mt-daapd -- integer overflow (86a4d810-1884-11dd-a914-0016179b2dd5)

FrSIRT reports : A vulnerability has been identified in mt-daapd which could be exploited by remote attackers to cause a denial of service or compromise an affected system. This issue is caused by a buffer overflow error in the wsgetpostvars function when processing a negative Content-Length :...

CVE-2008-1985

Cross-site scripting XSS vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php...

Fedora 8 : mt-daapd-0.9-0.4.1696.fc8 (2008-3250)

Bug 442688 - CVE-2008-1771 mt-daapd: integer overflow allowing remote DoS and possibly arbitrary code execution Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

[SECURITY] Fedora 8 Update: mt-daapd-0.9-0.4.1696.fc8

The purpose of this project is built the best server software to serve digital music to the Roku Soundbridge and iTunes; to be able to serve the widest variety of digital music content over the widest range of devices...

mt-daapd -- integer overflow

FrSIRT reports: A vulnerability has been identified in mt-daapd which could be exploited by remote attackers to cause a denial of service or compromise an affected system. This issue is caused by a buffer overflow error in the wsgetpostvars function when processing a negative Content-Length: head...

Multi-Threaded DAAP Daemon: Multiple vulnerabilities

Background Multi-Threaded DAAP Daemon mt-daapd, also known as the Firefly Media Server, is a software to serve digital music to the Roku Soundbridge and Apple's iTunes. Description nnp discovered multiple vulnerabilities in the XML-RPC handler in the file webserver.c. The wsaddarg function contai...

Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities

Exploit for unknown platform in category remote exploits ========================================================================= Firefly Media Server mt-daapd 2.4.1 / SVN 1699 Multiple Vulnerabilities ========================================================================= Luigi Auriemma...

firefly media server (mt-daapd) 2.4.1 svn 1699 - Multiple Vulnerabilities

firefly media server mt-daapd 2.4.1 svn 1699 - Multiple Vulnerabilities Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B...

firefly media server (mt-daapd) 2.4.1 / svn 1699 - Multiple Vulnerabilities

Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...

FreeBSD : mt-daapd -- denial of service vulnerability (a7080c30-91a2-11dc-b2eb-00b0d07e6c7e)

US-CERT reports : webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepasswor...

Vulnerability in mt-scode

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в mt-scode. Это капча плагин для Movable Type также имеется порт для Drupal. Данная капча уязвима для MustLive CAPTCHA bypass method. Insufficient Anti-automation: Эксплоит:...

[UPH-07-01] Firefly Media Server DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPH-07-01 UnprotectedHex.com security advisory 07-01 Discovered by nnp Discovered : 1 August 2007 Reported to the vendor : 13 October 2007 Fixed by vendor : 21 October 2007 Vulnerability class : Remote DoS Affected product : mt-dappd/Firefly Media...

CVE-2007-5824

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...