(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running a vulnerable version of Icecast, an open-source streaming server. It
is reported that every version of the 1.3 branch is vulnerable to a cross scripting issue. An
attacker may steal cookie-based authentication credentials from a legitimate user by
sending malformed links to the Icecast server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0781
Icecast < 2.0.1 HTTP Basic Authentication Remote Overflow
PVS ID: 2137 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a vulnerable version of Icecast, an open-source streaming server. It is reported that
every version prior to 2.0.1 is vulnerable to a remote buffer overflow during the Base64
authorization request processing. This vulnerability may permit an attacker to execute
arbitrary code on the remote host.
Solution: Upgrade to Icecast 2.0.1 or higher.
CVE-2004-2027
Icecast Server < 2.0.0 list_directory Function Traversal Directory Enumeration
PVS ID: 2138 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running a vulnerable version of Icecast, an open-source streaming server. It is
reported that every version prior 2.0.0 is vulnerable to directory traversal issue. This issue
discloses the existence of directory on the remote system that may permit an attacker to
gather information about the host.
Solution: Upgrade to Icecast 2.0.0 or higher.
CVE-2002-1982
Icecast < 1.3.12 Multiple Remote Buffer Overflows
PVS ID: 2139 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a vulnerable version of Icecast, an open-source streaming server. It is reported that
every version up to 1.3.10 is vulnerable to a remote buffer overflow which may permit an
attacker to execute arbitrary code on the host.
Solution: Upgrade to Icecast 1.3.12 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 533