CVE-2001-1083 - Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allo

CVE-2001-1083

Summary

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).

References

Vulnerable Configurations

cpe:2.3:a:icecast:icecast:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:icecast:icecast:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*
cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*
cpe:2.3:a:icecast:icecast:1.3.8_beta2:*:*:*:*:*:*:*
cpe:2.3:a:icecast:icecast:1.3.8_beta2:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 10-10-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

redhat via4

advisories

rhsa
id RHSA-2001:105
rhsa
id RHSA-2002:063

refmap via4

bid	2933
bugtraq	20010626 Advisory
caldera	CSSA-2002-020.0
confirm	http://www.icecast.org/releases/icecast-1.3.11.tar.gz
debian	DSA-089
misc	http://www.icecast.org/index.html
xf	icecast-http-remote-dos(6751)

Last major update

10-10-2017 - 01:29

Published

26-06-2001 - 04:00

Last modified

10-10-2017 - 01:29