Lucene search
MitreCVE-2006-3534HistoryJul 12, 2006 - 9:05 p.m.
CVE-2006-3534
2006-07-1221:05:00
mitre
web.nvd.nist.gov
23
cve
2006
3534
directory traversal
nullsoft
shoutcast dsp
security vulnerability
nvd
http get request
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.025
Percentile
90.1%
Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing “/content”.
Affected configurations
Node
nullsoftshoutcast_serverRange≤1.9.5
ORnullsoftshoutcast_serverMatch1.7.1linux
ORnullsoftshoutcast_serverMatch1.8.2
ORnullsoftshoutcast_serverMatch1.8.3
ORnullsoftshoutcast_serverMatch1.8.3win32
ORnullsoftshoutcast_serverMatch1.8.9
ORnullsoftshoutcast_serverMatch1.8.9freebsd
ORnullsoftshoutcast_serverMatch1.8.9linux
ORnullsoftshoutcast_serverMatch1.8.9mac_os_x
ORnullsoftshoutcast_serverMatch1.8.9solaris
ORnullsoftshoutcast_serverMatch1.8.9win32
ORnullsoftshoutcast_serverMatch1.9.2
ORnullsoftshoutcast_serverMatch1.9.2win32
ORnullsoftshoutcast_serverMatch1.9.4linux
ORnullsoftshoutcast_serverMatch1.9.4mac_os_x
ORnullsoftshoutcast_serverMatch1.9.4win32
ORnullsoftshoutcast_serverMatch1.9.5linux
ORnullsoftshoutcast_serverMatch1.9.5mac_os_x
ORnullsoftshoutcast_serverMatch1.9.5win32
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nullsoft | shoutcast_server | * | cpe:2.3:a:nullsoft:shoutcast_server:*:*:*:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.7.1 | cpe:2.3:a:nullsoft:shoutcast_server:1.7.1:*:linux:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.2 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.2:*:*:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.3 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.3:*:*:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.3 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.3:*:win32:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.9 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:*:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.9 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:freebsd:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.9 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:linux:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.9 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:mac_os_x:*:*:*:*:* |
| nullsoft | shoutcast_server | 1.8.9 | cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:solaris:*:*:*:*:* |
Related
nvd
nvd
CVE-2006-3534
2006-07-12 21:05:00
CVE-2006-3535
2006-07-12 21:05:00
cvelist
cvelist
CVE-2006-3534
2006-07-12 21:00:00
CVE-2006-3535
2006-07-12 21:00:00
cve
cve
CVE-2006-3535
2006-07-12 21:05:00
gentoo
gentoo
SHOUTcast server: Multiple vulnerabilities
2006-07-09 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200607-05 (shoutcast)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200607-05 (shoutcast)
2008-09-24 00:00:00
nessus
nessus
GLSA-200607-05 : SHOUTcast server: Multiple vulnerabilities
2006-07-10 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.025
Percentile
90.1%
Related for CVE-2006-3534