CVE-2014-9018

概要

参考情報

• icecast.org/news/icecast-release-2_4_1
• lists.opensuse.org/opensuse-updates/2014-12/msg00038.html
• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2014/11/19/23 · Exploit
• openwall.com/lists/oss-security/2014/11/20/22 · Exploit
• securityfocus.com/bid/71312
• exchange.xforce.ibmcloud.com/vulnerabilities/98991
• trac.xiph.org/ticket/2087 · Exploit
• trac.xiph.org/ticket/2089

icecast のその他の脆弱性

• CVE-2014-9091中 4.6Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain p…
• CVE-2005-0838高 7.5Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary…
• CVE-2005-0837中 5.0IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trail…
• CVE-2004-1561高 7.5Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of he…
• CVE-2004-0781中 4.3Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote at…