icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
References
Link | Resource |
---|---|
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html | Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html | Third Party Advisory |
http://www.icecast.org/ | Patch Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=768176 | Issue Tracking |
Configurations
History
No history.
Information
Published : 2012-11-20 00:55
Updated : 2024-02-28 12:00
NVD link : CVE-2011-4612
Mitre link : CVE-2011-4612
CVE.ORG link : CVE-2011-4612
JSON object : View
Products Affected
xiph
- icecast
CWE
CWE-20
Improper Input Validation