PT-2005-1866 · Icecast+1 · Icecast+1

Published 2005-03-22 · Updated 2024-06-15 · CVE-2005-0837

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IceCast version 2.20

Description The issue allows remote attackers to bypass the XSL parser and obtain the source for XSL files. This can be achieved by making a request for a .xsl file with a trailing dot.

Recommendations For IceCast version 2.20, consider restricting access to .xsl files to prevent unauthorized access to their source code. As a temporary workaround, avoid serving .xsl files directly and instead use a proxy or other intermediary to handle requests for these files.

Exploit

Fix

Related Identifiers

CVE-2005-0837

OPENSUSE-SU-2024:10584-1

Affected Products

Debian

Icecast

References · 15

• 🔥 http://securityfocus.com/bid/12849 · Exploit
• 🔥 http://securityfocus.com/archive/1/393705 · Exploit
• 🔥 http://securitytracker.com/id?1013475 · Exploit
• https://security-tracker.debian.org/tracker/source-package/icecast2 · Vendor Advisory
• http://secunia.com/advisories/14644 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0837 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0837 · Security Note
• https://osv.dev/vulnerability/CVE-2005-0837 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0837 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10584-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0837 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19760 · Note
• https://suse.com/security/cve/CVE-2005-0837 · Note
• https://packages.debian.org/src:icecast2 · Note
• https://suse.com/security/cve/CVE-2018-18820 · Note