PT-2005-1867 · Icecast+1 · Icecast+1

Published 2005-03-22 · Updated 2017-07-11 · CVE-2005-0838

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IceCast version 2.20

Description The issue is related to multiple buffer overflows in the XSL parser, which may allow attackers to cause a denial of service and possibly execute arbitrary code. This can be achieved through a long test value in an xsl:when tag, a long test value in an xsl:if tag, or a long select value in an xsl:value-of tag.

Recommendations For IceCast version 2.20, consider disabling the XSL parser functionality until a patch is available to prevent potential exploitation. Restrict access to the XSL parser to minimize the risk of denial of service or arbitrary code execution. Avoid using long test values in xsl:when and xsl:if tags, as well as long select values in xsl:value-of tags, in the affected XSL parser.

Exploit

Fix

Related Identifiers

CVE-2005-0838

Affected Products

Debian

Icecast

References · 12

• 🔥 http://securityfocus.com/bid/12849 · Exploit
• 🔥 http://securityfocus.com/archive/1/393705 · Exploit
• 🔥 https://exploit-db.com/exploits/25238 · Exploit
• 🔥 http://securitytracker.com/id?1013475 · Exploit
• https://security-tracker.debian.org/tracker/source-package/icecast2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0838 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-0838 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0838 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0838 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0838 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19753 · Note
• https://packages.debian.org/src:icecast2 · Note