Published: 20/12/2007 Updated: 15/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and previous versions, and SVN 344 and previous versions, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long SOURCE request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
peercast peercast 0.1211
peercast peercast 0.1212
peercast peercast
peercast peercast 0.1215

Several remote vulnerabilities have been discovered in GNOME PeerCast, the GNOME interface to PeerCast, a P2P audio and video streaming server The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-6454 Luigi Auriemma discovered that PeerCast is vulnerable to a heap overflow in the HTTP server code, w ...

Luigi Auriemma discovered that PeerCast, a P2P audio and video streaming server, is vulnerable to a heap overflow in the HTTP server code, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request The old stable distribution (sarge) does not contain peercast For the stable distrib ...

source: wwwsecurityfocuscom/bid/26899/info PeerCast is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer Successfully exploiting these issues will allow an attacker to execute arbitrary code with the privileges of the user ...

CWE-119 http://aluigi.altervista.org/adv/peercasthof-adv.txt http://www.securityfocus.com/bid/26899 http://secunia.com/advisories/28120 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457300 http://www.debian.org/security/2007/dsa-1441 http://secunia.com/advisories/28260 http://www.gentoo.org/security/en/glsa/glsa-200801-22.xml http://secunia.com/advisories/28719 http://securityreason.com/securityalert/3461 http://www.debian.org/security/2008/dsa-1583 http://secunia.com/advisories/30325 http://www.vupen.com/english/advisories/2007/4246 http://bugs.gentoo.org/show_bug.cgi?id=202747 https://exchange.xforce.ibmcloud.com/vulnerabilities/39075 http://www.securityfocus.com/archive/1/485199/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1583 https://www.exploit-db.com/exploits/30894/

CVE-2007-6454

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect