8 results (0.010 seconds)

CVSS: 7.8EPSS: 2%CPEs: 19EXPL: 3

CVE-2006-3534

https://notcve.org/view.php?id=CVE-2006-3534

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content". Vulnerabilidad de salto de directorio en Nullsoft SHOUTcast DSP versiones anteriores a la 1.9.6, filtra secuencias de salto de directorio antes de decodificarse, lo que permite a atacantes remotos leer ficheros de su elección a través de secuencias codificadas punto punto (%2E%2E) en una petición HTTP GET para una ruta de archivo que contenga "/content". • http://bugs.gentoo.org/show_bug.cgi?id=136721 http://people.ksp.sk/~goober/advisory/001-shoutcast.html http://secunia.com/advisories/20524 http://security.gentoo.org/glsa/glsa-200607-05.xml http://securitytracker.com/id?1016493 http://www.shoutcast.com/#news http://www.vupen.com/english/advisories/2006/2801 •

CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0

CVE-2006-3007

https://notcve.org/view.php?id=CVE-2006-3007

Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ. Múltiples vulnerabilidades de XSS en SHOUTcast 1.9.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los campos DJ (1) Description, (2) URL, (3) Genre, (4) AIM y (5) ICQ. • http://marc.info/?l=bugtraq&m=114980135615062&w=2 http://secunia.com/advisories/20524 http://secunia.com/advisories/21005 http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml http://www.securityfocus.com/bid/18376 http://www.vupen.com/english/advisories/2006/2254 https://exchange.xforce.ibmcloud.com/vulnerabilities/27129 •

CVSS: 7.5EPSS: 97%CPEs: 3EXPL: 3

CVE-2004-1373 – SHOUTcast DNAS/Linux 1.9.4 - Format String Remote Overflow

https://notcve.org/view.php?id=CVE-2004-1373

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file. • https://www.exploit-db.com/exploits/712 https://www.exploit-db.com/exploits/830 https://www.exploit-db.com/exploits/16751 http://marc.info/?l=bugtraq&m=110382975516003&w=2 http://marc.info/?l=bugtraq&m=110886444014745&w=2 http://securitytracker.com/id?1012675 http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml http://www.securityfocus.com/bid/12096 https://exchange.xforce.ibmcloud.com/vulnerabilities/18669 •

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 5

CVE-2003-1174 – Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption

https://notcve.org/view.php?id=CVE-2003-1174

Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via (1) icy-name followed by a long server name or (2) icy-url followed by a long URL. • https://www.exploit-db.com/exploits/23328 https://www.exploit-db.com/exploits/23329 http://secunia.com/advisories/10146 http://securitytracker.com/id?1008080 http://www.osvdb.org/2776 http://www.securityfocus.com/archive/1/343177 http://www.securityfocus.com/bid/8954 https://exchange.xforce.ibmcloud.com/vulnerabilities/13586 •

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2002-1470

https://notcve.org/view.php?id=CVE-2002-1470

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file. SHOUTcast 1.8.9 y anteriores permite a usuarios locales obtenter la contraseña administrativa en texto claro mediante una petición GET al puerto 9001, lo que hace que la contraseña sea registrada en el fichero sc_serv.log, con permisos de lectura para todo el mundo. • http://archives.neohapsis.com/archives/bugtraq/2002-08/0017.html http://www.iss.net/security_center/static/9775.php http://www.securityfocus.com/bid/5414 •