icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
References
Link | Resource |
---|---|
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html | Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html | Third Party Advisory |
http://www.icecast.org/ | Patch Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=768176 | Issue Tracking |
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html | Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html | Third Party Advisory |
http://www.icecast.org/ | Patch Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=768176 | Issue Tracking |
Configurations
History
21 Nov 2024, 01:32
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html - Third Party Advisory | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html - Third Party Advisory | |
References | () http://www.icecast.org/ - Patch, Vendor Advisory | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=768176 - Issue Tracking |
Information
Published : 2012-11-20 00:55
Updated : 2024-11-21 01:32
NVD link : CVE-2011-4612
Mitre link : CVE-2011-4612
CVE.ORG link : CVE-2011-4612
JSON object : View
Products Affected
xiph
- icecast
CWE
CWE-20
Improper Input Validation