Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nullsoft shoutcast server vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv2
CVE-2006-3534
Directory traversal vulnerability in Nullsoft SHOUTcast DSP prior to 1.9.6 filters directory traversal sequences before decoding, which allows remote malicious users to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing &...
Nullsoft Shoutcast Server 1.8.3
Nullsoft Shoutcast Server 1.9.2
Nullsoft Shoutcast Server 1.8.9
Nullsoft Shoutcast Server 1.9.4
Nullsoft Shoutcast Server 1.9.5
Nullsoft Shoutcast Server 1.7.1
Nullsoft Shoutcast Server 1.8.2
Nullsoft Shoutcast Server
4.3
CVSSv2
CVE-2006-3007
Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote malicious users to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.
Nullsoft Shoutcast Server 1.8.9
Nullsoft Shoutcast Server 1.9.5
Nullsoft Shoutcast Server 1.7.1
Nullsoft Shoutcast Server 1.9.4
Nullsoft Shoutcast Server 1.8.3
Nullsoft Shoutcast Server 1.9.2
7.2
CVSSv2
CVE-1999-1561
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
Nullsoft Shoutcast Server 1.9.7
7.5
CVSSv2
CVE-2002-0199
Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.
Nullsoft Shoutcast Server 1.8.3
7.5
CVSSv2
CVE-2002-0907
Buffer overflow in SHOUTcast 1.8.9 and other versions prior to 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
Nullsoft Shoutcast Server 1.8.9
1 EDB exploit
7.5
CVSSv2
CVE-2004-1373
Format string vulnerability in SHOUTcast 1.9.4 allows remote malicious users to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
Nullsoft Shoutcast Server 1.9.4
3 EDB exploits
5
CVSSv2
CVE-2001-1304
Buffer overflow in SHOUTcast Server 1.8.2 allows remote malicious users to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.
Nullsoft Shoutcast Server 1.8.2
4.3
CVSSv2
CVE-2007-1229
Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote malicious users to inject arbitrary web script or HTML via the top-level URI on the Incoming interface (port 8001/tcp), which is not properly handled in the administrator interface when v...
Nullsoft Shoutcast Server 1.9.7
1 EDB exploit
2.1
CVSSv2
CVE-2002-1470
SHOUTcast 1.8.9 and previous versions allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.
Nullsoft Shoutcast Server 1.8.9
2.1
CVSSv2
CVE-2003-1174
Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via (1) icy-name followed by a long server name or (2) icy-url followed by a long URL.
Nullsoft Shoutcast Server 1.9.2
2 EDB exploits
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started