Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425.

Steve Kemp discovered two vulnerabilities in gnump3d, a streaming server for MP3 and OGG files. The Common Vulnerabilities and Exposures Project identifies the following problems :

  - CVE-2005-3122     The 404 error page does not strip malicious JavaScript     content from the resulting page, which would be executed     in the victims browser.

  - CVE-2005-3123     By using specially crafting URLs it is possible to read     arbitrary files to which the user of the streaming     server has access to.

The remote host is affected by the vulnerability described in GLSA-200511-05 (GNUMP3d: Directory traversal and XSS vulnerabilities)

    Steve Kemp reported about two cross-site scripting attacks that are     related to the handling of files (CVE-2005-3424, CVE-2005-3425). Also     reported is a directory traversal vulnerability which comes from the     attempt to sanitize input paths (CVE-2005-3123).
  Impact :

    A remote attacker could exploit this to disclose sensitive information     or inject and execute malicious script code, potentially compromising     the victim's browser.
  Workaround :

    There is no known workaround at this time.

The remote host is running GNUMP3d, an open source audio / video streaming server. 

The installed version of GNUMP3d on the remote host fails to completely filter out directory traversal sequences from request URIs. By leveraging this flaw, an attacker can read arbitrary files on the remote host subject to the privileges under which the server operates.  In addition, it fails to sanitize user-supplied input to several scripts, which can be used to launch cross-site scripting attacks against the affected application.

ID	Name	Product	Family	Severity
22743	Debian DSA-877-1 : gnump3d - XSS, directory traversal	Nessus	Debian Local Security Checks	medium
20155	GLSA-200511-05 : GNUMP3d: Directory traversal and XSS vulnerabilities	Nessus	Gentoo Local Security Checks	medium
20110	GNUMP3d < 2.9.6 Multiple Remote Vulnerabilities (XSS, Traversal)	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2005-3424

medium

Tenable Plugins

medium

medium

medium