PT-2005-1866 · Icecast+1 · Icecast+1

Publicado 2005-03-22 · Atualizado 2024-06-15 · CVE-2005-0837

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IceCast version 2.20

Description The issue allows remote attackers to bypass the XSL parser and obtain the source for XSL files. This can be achieved by making a request for a .xsl file with a trailing dot.

Recommendations For IceCast version 2.20, consider restricting access to .xsl files to prevent unauthorized access to their source code. As a temporary workaround, avoid serving .xsl files directly and instead use a proxy or other intermediary to handle requests for these files.

Exploit

Correção

Identificadores relacionados

CVE-2005-0837

OPENSUSE-SU-2024:10584-1

Produtos afetados

Debian

Icecast

Referências · 15

• 🔥 http://securityfocus.com/bid/12849 · Exploit
• 🔥 http://securityfocus.com/archive/1/393705 · Exploit
• 🔥 http://securitytracker.com/id?1013475 · Exploit
• https://security-tracker.debian.org/tracker/source-package/icecast2 · Aviso do Fabricante
• http://secunia.com/advisories/14644 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19760 · Nota
• https://suse.com/security/cve/CVE-2005-0837 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0837 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0837 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2005-0837 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0837 · Nota de Segurança
• https://packages.debian.org/src:icecast2 · Nota
• https://suse.com/security/cve/CVE-2018-18820 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10584-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0837 · Aviso do Fabricante