(PVS) Signatures - Tenable Network Security

CVE-2001-1230
Icecast < 1.3.10 Multiple Remote Buffer Overflows
PVS ID: 2140 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a vulnerable version of Icecast, an open-source streaming server. It is reported that
every version prior 1.3.10 is vulnerable to a remote buffer overflow that may permit an
attacker to execute arbitrary code on the host. Most vulnerable versions usualy run as root.
Solution: Upgrade to Icecast 1.3.10 or higher.
CVE-2001-1229
Icecast < 1.3.12-1 HTTP GET Request Remote Overflow
PVS ID: 2141 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a vulnerable version of Icecast, an open-source streaming server. It is reported that
every version prior to 1.3.12-1 is vulnerable to a remote buffer overflow that may permit an
attacker to execute arbitrary code on the host.
Solution: Upgrade to Icecast 1.3.12-1 or higher.
CVE-2002-0177
Icecast Server < 1.3.10 Crafted URI Remote DoS
PVS ID: 2142 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a vulnerable version of Icecast, an open-source streaming server. It
is reported that every version prior to 1.3.10 is vulnerable to a remote denial of service. The
problem occurs if an attacker crafts a malicious file request by appending '/', '\' or '.' at the
end.
Solution: Upgrade to Icecast 1.3.10 or higher.
CVE-2001-0784
Icecast Server < 1.3.10 Directory Traversal Arbitrary File Access
PVS ID: 2143 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running a vulnerable version of Icecast, an
open-source streaming server. It is reported that every version prior to 1.3.10 is vulnerable
Family Internet Services 534