exploits , vulnerabilities , articles , Nullsoft SHOUTcast icy-name/icy-url Memory Corruption Vulnerability

Title	Nullsoft SHOUTcast icy-name/icy-url Memory Corruption Vulnerability
Published	2003-11-03-12:00AM
Updated	2004-03-04-04:43PM
Class	Boundary Condition Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery of this issue is credited to HEX <hex@hex_net_ru.securityfocus.com>.
Vulnerable	NullSoft Shoutcast Server 1.9.2 Win32
Not Vulnerable
Code	The following proof-of-concept example was provided: >nc target 8001 changeme icy-name:AAA...[Ax275]BBBB[rewrite EAX] icy-genre:DoS radio icy-url:AAA...[Ax288]BBBB[rewrite EAX] icy-pub:1 icy-irc:N/A icy-icq:N/A icy-aim:N/A icy-br:160 --- A proof of concept exploit has been made available. It should be noted that Symantec has not verified the integrity of this file. The proof of concept is available at the following location: http://www.securitylab.ru/_tools/shoutdown.01.tar.gz exworm of oseen has provided the following connect back exploit, oseen_shoucast.c. The following exploit code has been provided: /data/vulnerabilities/exploits/shoutexp.py /data/vulnerabilities/exploits/oseen_shoucast.c
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-10-10 CUPS Multiple Heap Based Buffer Overflow Vulnerabilities
• 2008-10-10 Sun Java System Web Proxy Server FTP Subsytem Heap Based Buffer Overflow Vulnerability
• 2008-10-09 ModSecurity Transformation Caching Security Bypass Vulnerability
• 2008-10-09 DATAC RealWin SCADA Server Remote Stack Buffer Overflow Vulnerability
• 2008-10-09 Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
• 2008-10-09 HP System Management Homepage (SMH) for Linux and Windows Cross Site Scripting Vulnerability
• 2008-10-09 YaCy Multiple Unspecified Vulnerabilities
• 2008-10-09 Opera Cached Java Applet Security Bypass Vulnerability
• 2008-10-09 WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
• 2008-10-09 Drupal EveryBlog Module Multiple Unspecified Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Mon, 13 Oct 2008 13:51:23 +0000