high7.5Public exploit code
CVE-2002-0177
Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Icecast 1.x - AVLLib Buffer Overflow2002-02-16 · remote · unix · Verified
Impact
Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icecast | Icecast | Versions 1.3.7, 1.3.8_beta2, 1.3.10, 1.3.11 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=101780890326179&w=2
- http://marc.info/?l=bugtraq&m=101786838300906&w=2
- http://marc.info/?l=bugtraq&m=101793704306035&w=2
- http://www.kb.cert.org/vuls/id/596387
- http://www.securityfocus.com/bid/4415
- http://www.xiph.org/archives/icecast/2616.html
- http://marc.info/?l=bugtraq&m=101780890326179&w=2
- http://marc.info/?l=bugtraq&m=101786838300906&w=2
- http://marc.info/?l=bugtraq&m=101793704306035&w=2
- http://www.kb.cert.org/vuls/id/596387
- http://www.securityfocus.com/bid/4415
- http://www.xiph.org/archives/icecast/2616.html