Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2004-1373
HistoryJan 19, 2005 - 5:00 a.m.

CVE-2004-1373

2005-01-1905:00:00
mitre
web.nvd.nist.gov
30
cve
2004
1373
format string vulnerability
shoutcast
denial of service
application crash
execute arbitrary code
remote attackers
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.972

Percentile

99.8%

JSON

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.

Affected configurations

Nvd
Node
nullsoftshoutcast_serverMatch1.9.4linux
OR
nullsoftshoutcast_serverMatch1.9.4mac_os_x
OR
nullsoftshoutcast_serverMatch1.9.4win32
VendorProductVersionCPE
nullsoftshoutcast_server1.9.4cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:linux:*:*:*:*:*
nullsoftshoutcast_server1.9.4cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:mac_os_x:*:*:*:*:*
nullsoftshoutcast_server1.9.4cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:win32:*:*:*:*:*

Related

saint 4
cvelist 1
openvas 2
gentoo 1
checkpoint_advisories 3
nessus 2
exploitdb 3
packetstorm 1
canvas 1
metasploit 1
nvd 1
saint
saint
SHOUTcast filename format string vulnerability
2006-05-17 00:00:00
SHOUTcast filename format string vulnerability
2006-05-17 00:00:00
SHOUTcast filename format string vulnerability
2006-05-17 00:00:00
cvelist
cvelist
CVE-2004-1373
2005-01-19 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200501-04 (Shoutcast-server-bin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200501-04 (Shoutcast-server-bin)
2008-09-24 00:00:00
gentoo
gentoo
Shoutcast Server: Remote code execution
2005-01-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against SHOUTcast Format String Vulnerability
2006-03-26 00:00:00
SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)
2009-10-18 00:00:00
SHOUTcast Filename Format String (CVE-2004-1373)
2009-10-18 00:00:00
nessus
nessus
GLSA-200501-04 : Shoutcast Server: Remote code execution
2005-02-14 00:00:00
SHOUTcast Server Filename Handling Format String
2004-12-28 00:00:00
exploitdb
exploitdb
SHOUTcast DNAS/Linux 1.9.4 - Format String Remote Overflow
2004-12-23 00:00:00
SHOUTcast DNAS/Win32 1.9.4 - File Request Format String Overflow (Metasploit)
2010-04-30 00:00:00
SHOUTcast 1.9.4 (Windows) - File Request Format String Remote Overflow
2005-02-19 00:00:00
packetstorm
packetstorm
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
2009-11-26 00:00:00
canvas
canvas
Immunity Canvas: SHOUTCAST_FS
2004-12-23 05:00:00
metasploit
metasploit
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
2005-12-26 14:34:22
nvd
nvd
CVE-2004-1373
2004-12-23 05:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.972

Percentile

99.8%

JSON
Related for CVE-2004-1373
saint4cvelist1openvas2gentoo1checkpoint_advisories3nessus2exploitdb3packetstorm1canvas1metasploit1nvd1