Lucene search

MitreCVE-2004-1561

HistoryFeb 20, 2005 - 5:00 a.m.

CVE-2004-1561

2005-02-2005:00:00

mitre

web.nvd.nist.gov

144

cve-2004-1561

icecast

buffer overflow

remote code execution

http request

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON

Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.

Affected configurations

Nvd

Node

icecasticecastMatch2.0

icecasticecastMatch2.0.1

VendorProductVersionCPE
icecasticecast2.0cpe:2.3:a:icecast:icecast:2.0:*:*:*:*:*:*:*
icecasticecast2.0.1cpe:2.3:a:icecast:icecast:2.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
icecast	icecast	2.0	cpe:2.3:a:icecast:icecast:2.0:::::::*
icecast	icecast	2.0.1	cpe:2.3:a:icecast:icecast:2.0.1:::::::*

References

aluigi.altervista.org/adv/iceexec-adv.txt

marc.info/?l=bugtraq&m=109640005127644&w=2

marc.info/?l=bugtraq&m=109674593230539&w=2

secunia.com/advisories/12666/

securitytracker.com/id?1011439

www.osvdb.org/10446

www.securiteam.com/exploits/6X00315BFM.html

www.securityfocus.com/bid/11271

exchange.xforce.ibmcloud.com/vulnerabilities/17538

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON

Related for CVE-2004-1561