Vulnerability Name:

CVE-2001-1083 (CCN-6751)

Assigned:2001-06-26
Published:2001-06-26
Updated:2017-10-10
Summary:Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: CALDERA
Type: UNKNOWN
CSSA-2002-020.0

Source: CCN
Type: Caldera International, Inc. Security Advisory CSSA-2002-020.0
Linux: icecast buffer overflows and denial-of-service

Source: CCN
Type: BugTraq Mailing List, Tue Jun 26 2001 - 10:14:04 CDT
Advisory

Source: MITRE
Type: CNA
CVE-2001-1083

Source: CCN
Type: RHSA-2002-063
Updated icecast packages are available

Source: DEBIAN
Type: UNKNOWN
DSA-089

Source: DEBIAN
Type: DSA-089
icecast-server -- remote root exploit (and others)

Source: CCN
Type: Digit-Labs Security Advisory DLA-25-06-2001
Security-issues with Icecast Version 1.3.7

Source: CCN
Type: Icecast Web site
latest news

Source: MISC
Type: UNKNOWN
http://www.icecast.org/index.html

Source: CONFIRM
Type: UNKNOWN
http://www.icecast.org/releases/icecast-1.3.11.tar.gz

Source: CCN
Type: OSVDB ID: 5472
Icecast Crafted URI Remote DoS

Source: REDHAT
Type: UNKNOWN
RHSA-2001:105

Source: REDHAT
Type: UNKNOWN
RHSA-2002:063

Source: BUGTRAQ
Type: Exploit, Vendor Advisory
20010626 Advisory

Source: BID
Type: Exploit, Patch, Vendor Advisory
2933

Source: CCN
Type: BID-2933
Icecast Server Slash File Name Denial Of Service Vulnerability

Source: XF
Type: UNKNOWN
icecast-http-remote-dos(6751)

Source: XF
Type: UNKNOWN
icecast-http-remote-dos(6751)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:icecast:icecast:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:icecast:icecast:1.3.7:*:*:*:*:*:*:*
  • OR cpe:/a:icecast:icecast:1.3.8_beta2:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:icecast:icecast:1.3.7:*:*:*:*:*:*:*
  • AND
  • cpe:/o:debian:debian_linux:2.2:*:*:*:*:*:*:*
  • OR cpe:/a:redhat:linux_powertools:7.0:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.debian:def:89
    V
    remote root exploit (and others)
    2001-12-05
    BACK
    icecast icecast 1.0.0
    icecast icecast 1.3.7
    icecast icecast 1.3.8_beta2
    icecast icecast 1.3.7
    debian debian linux 2.2
    redhat linux powertools 7.0