CVE-2002-1982 in Icecast

Riassunto

di MITRE

Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 29/06/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19624
• CPE: pronto
• CWE: CWE-22 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.0 (NVD)
• EPSS: 0.03206
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1982
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1982
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1982/