CVE-2002-0907 Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
HighCVSS 7.5
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft shoutcast server | = 1.8.9 | No fix listed |
References
- 20020604 SHOUTcast 1.8.9 bufferoverflow mailing-list
- shoutcast-icy-remote-bo(9251) patch vdb-entry vendor-advisory
- 4934 exploit patch vdb-entry vendor-advisory