Get our new Windows 7 eBook (PDF) for $7 with 70+ Tips. Download Now!
SHOUTcast Filename Format String Vulnerability
- 0
- Add a Comment
- No Related Post
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Unpatched
Software: SHOUTcast 1.x
Tomasz Trojanowski and Damian Put have discovered a vulnerability in SHOUTcast, which potentially can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is cause due to a format string error in the URL handling within the processing of requested filenames. This can be exploited to execute arbitrary code by sending a specially crafted HTTP request containing format specifiers.
The vulnerability has been confirmed in SHOUTcast DNAS/Linux version 1.9.4. Other versions may also be affected.
Solution: Restrict access or use another product.