Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote malicious users to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
icecast icecast 1.3.12 |