Nessus Plugin #15400

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

ICECast crafted URL DoS

Family:

Misc.

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Check icecast version

Version:

$Revision: 1.1 $

Cve_id:

CAN-2001-1083

Bugtraq_id:

2933

Xrefs:

OSVDB:5472

Description:

The remote server runs a version of ICECast, an open source
streaming audio server, which is older than version 1.3.11.

This version is affected by a remote denial of service because
Icecast server does not properly sanitize user-supplied input.

An remote attacker could send specially crafted URL, by adding '/', '\' or '.' to the end,
that may result in a loss of availability for the service.

*** Nessus reports this vulnerability using only
*** information that was gathered.

Solution : Upgrade to a newer version.
Risk factor : High