Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).

icecast 1.3.11 and earlier contained numerous security vulnerabilities, the most severe allowing a remote attacker to execute arbitrary code as root.

The remote server runs a version of Icecast, an open source streaming audio server that is older than version 1.3.11.

This version is affected by a remote denial of service because Icecast server does not properly sanitize user-supplied input.

A remote attacker could send a specially crafted URL, by adding '/', '\' or '.' to the end, that may result in a loss of availability for the service.

*** Nessus reports this vulnerability using only
*** information that was gathered.

The icecast-server (a streaming music server) package as distributed in Debian GNU/Linux 2.2 has several security problems :

  - if a client added a / after the filename of a file to be     downloaded the server would crash
  - by escaping dots as %2E it was possible to circumvent     security measures and download arbitrary files

  - there were several buffer overflows that could be     exploited to gain root access

These have been fixed in version 1.3.10-1, and we strongly recommend that you upgrade your icecast-server package immediately.


The i386 package mentioned in the DSA-089-1 advisory was incorrectly compiled and will not run on Debian GNU/Linux potato machines. This has been corrected in version 1.3.10-1.1.

The remote host is running a vulnerable version of Icecast, an open-source streaming server. It is reported that every version prior to 1.3.10 is vulnerable to a remote denial of service. The problem occurs if an attacker crafts a malicious file request by appending '/', '\' or '.' at the end.

ID	Name	Product	Family	Severity
18950	FreeBSD : icecast 1.x multiple vulnerabilities (5e92e8a2-5d7b-11d8-80e3-0020ed76ef5a)	Nessus	FreeBSD Local Security Checks	high
15400	Icecast Crafted URI Remote DoS	Nessus	Web Servers	medium
14926	Debian DSA-089-2 : icecast-server - remote root exploit (and others)	Nessus	Debian Local Security Checks	critical
2142	Icecast Server < 1.3.10 Crafted URI Remote DoS	Nessus Network Monitor	Web Servers	high

Detections

Analytics

CVE-2001-1083

high

Tenable Plugins

high

medium

critical

high