CVE-2004-1373 Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as dem...
HighCVSS 7.5
EPSS 70.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft shoutcast server | = 1.9.4 | No fix listed |
References
- 20041223 SHOUTcast remote format string vulnerability mailing-list
- 20050219 exwormshoucast part of PTjob project: SHOUTcast v1.9.4 remote mailing-list
- 1012675 vdb-entry
- GLSA-200501-04 patch vendor-advisory
- 12096 patch vdb-entry
- shoutcast-format-string(18669) vdb-entry