Heap overflow

Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request...

CVE-2007-6454

Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request...

CVE-2007-6454

Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request...

CVE-2007-6454

Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request...

CVE-2007-6454

CVE-2007-6454 affects PeerCast up to version 0.1217 (and SVN 344) and is caused by a heap-based buffer overflow in handshakeHTTP within servhs.cpp. An attacker can remotely trigger a long SOURCE request to cause denial of service and potentially execute arbitrary code. Public advisories (e.g., De...

Heap overflow in PeerCast 0.1217

Luigi Auriemma Application: PeerCast http://www.peercast.org Versions: = 0.1217 and SVN = 344 Platforms: Windows, plugin for Winamp, Linux and Mac Bug: heap overflow Exploitation: remote Date: 17 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 T...

PeerCast < 0.1218 servhs.cpp handShakeHTTP Function Remote Overflow

Binary data 4318.prm...

PeerCast servhs.cpp handshakeHTTP Function SOURCE Request Remote Overflow

The version of PeerCast installed on the remote host fails to check the length of user-supplied data in its 'handshakeHTTP' function in 'servhs.cpp' before copying it to the 'loginPassword' and 'loginMount' heap-based buffers. An unauthenticated attacker can leverage this issue to crash the...

PeerCast HandshakeHTTP多个缓冲区溢出漏洞

PeerCast是一款多平台P2P的音频流应用程序。 PeerCast包含的handshakeHTTP函数存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 handshakeHTTP函数处理loginPassword和loginMount数据存在边界条件错误，提交超大参数可导致发生堆缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 peercast.org PeerCast 0.1212 peercast.org PeerCast 0.1211 peercast.org PeerCast SVN 344 peercast.org PeerCast...

PeerCast 0.12 - HandshakeHTTP Multiple Buffer Overflow Vulnerabilities

PeerCast 0.12 - HandshakeHTTP Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26899/info PeerCast is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized...

PeerCast 0.12 - HandshakeHTTP Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26899/info PeerCast is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting these issues will allow an attacker to...

peercast -- buffer overflow vulnerability

Luigi Auriemma reports that peercast is vulnerable to a buffer overflow which could lead to a DoS or potentially remote code execution: The handshakeHTTP function which handles all the requests received by the other clients is vulnerable to a heap overflow which allows an attacker to fill the...

Information disclosure

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

CVE-2007-3087

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

CVE-2007-3087

Peercast is affected by CVE-2007-3087. The vulnerability arises because Pegercast places a cleartext password in a query string, enabling potential disclosure of sensitive data if an attacker can sniff network traffic or access Referer/browser history information. The connected documents confirm ...

CVE-2007-3087

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

PeerCast information leak

Username and password are present in request URI...

2007-06-03: PeerCast streaming server submits cleartext password

Hi there, peercast also submits the configured password in cleartext. e.g. http://www.domain.tld:7144/admin?cmd=login&pass=asdfg.jodi.org&submit=Login well, I have just played a bit around with it, so I assume this is already known. Solution might be to use stunnel. Have Fun : Greetz mpeg...

peercast01216.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

PeerCast URL Handling Buffer Overflow

This module exploits a stack buffer overflow in PeerCast 'PeerCast URL Handling Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in PeerCast 'MC' , 'License' = BSDLICENSE, 'References' = 'CVE', '2006-1148', 'OSVDB', '23777', 'BID', '17040' , 'Privileged' = false,...