Approved changes feed: RSS · Atom

cpe:2.3:a:peercast:peercast:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPeercast (a5773c3f-303f-54f9-867b-65d5513c0705)
ProductPeercast (bc6915a7-4d07-54a4-9fb3-1d024d201373)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mafintosh/peercast purl2cpe 2026-06-01 10:15:35.677223
pkg:npm/peercast purl2cpe 2026-06-01 10:15:35.677225

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6454 vulnerable 2026-06-08 04:50:08.856921 Details available
Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request.
Published: 2007-12-20T00:00:00.000Z
Updated: 2024-08-07T16:11:04.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3087 vulnerable 2026-06-08 04:49:46.788314 Details available
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information.
Published: 2007-06-06T10:00:00.000Z
Updated: 2024-08-07T14:05:29.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1148 vulnerable 2026-06-08 04:48:56.345287 Details available
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.
Published: 2006-03-10T11:00:00.000Z
Updated: 2024-08-07T17:03:27.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1806 vulnerable 2026-06-08 04:48:27.568994 Details available
Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL.
Published: 2005-06-01T04:00:00.000Z
Updated: 2024-08-07T22:06:57.147Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.