PT-2004-1855 · Xiph.Org · Icecast-Server

Published 2004-09-14 · Updated 2017-07-11 · CVE-2004-0781

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions icecast-server versions 1.3.12 and earlier

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script via the UserAgent parameter in the list.cgi of the internal web server.

Recommendations For versions 1.3.12 and earlier, update to a version later than 1.3.12 to resolve the issue.

Fix

Related Identifiers

CVE-2004-0781

DSA-541

Affected Products

Icecast-Server

References · 4

• http://debian.org/security/2004/dsa-541 · Vendor Advisory
• http://securityfocus.com/bid/11021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0781 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17086 · Note