vendor:
Peercast
by:
James Bercegay
7,5
CVSS
HIGH
Format String Vulnerability
134
CWE
Product Name: Peercast
Affected Version From: <= 0.1211
Affected Version To: None
Patch Exists: YES
Related CWE: CVE-2005-1806
CPE: a:peercast.org:peercast
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2005
Peercast Format String Vulnerability
There is a serious security issue in peercast versions 0.1211 and earlier that may allow for an attacker to execute arbitrary code on the remote target with the privileges of the user running peercast (usually administrator) or crash the vulnerable server. There is an updated version of peercast available and all users should upgrade as soon as possible. There is a very dangerous format string issue in peercast that may allow for an attacker to execute arbitrary code on the remote target with the privileges of the user running peercast or crash the vulnerable server. Below is an example of how this vulnerability can be exploited to crash a vulnerable server.
Mitigation:
Upgrade to the latest version of Peercast