The icecast-server (a streaming music server) package as distributed
in Debian GNU/Linux 22 has several security problems:
if a client added a / after the filename of a file to be downloaded
the server would crash
by escaping dots as E it was possible to circumvent security measures
and download arbitrary files
there were several buffer ...