GCVE - cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*

part: a version: 1.3.7 update: *

Vendor	Icecast (`7884543e-2ef2-5010-abf5-cb40513c5fd3`)
Product	Icecast (`c0f375d8-c071-5ca3-90fc-8bab50abc877`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-2027`	vulnerable	2026-06-08 04:48:08.337749	Details available Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read. Published: 2005-05-10T04:00:00.000Z Updated: 2024-08-08T01:15:01.552Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-200405-10.xml http://www.securityfocus.com/bid/10311 http://secunia.com/advisories/11578 http://www.xiph.org/archives/icecast/7144.html http://www.osvdb.org/6075	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0781`	vulnerable	2026-06-08 04:47:51.145221	Details available Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter. Published: 2004-09-14T04:00:00.000Z Updated: 2024-08-08T00:31:47.403Z Open on db.gcve.eu Reference links http://www.debian.org/security/2004/dsa-541 https://exchange.xforce.ibmcloud.com/vulnerabilities/17086 http://www.securityfocus.com/bid/11021	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0177`	vulnerable	2026-06-08 04:46:20.861883	Details available Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client. Published: 2002-04-18T04:00:00.000Z Updated: 2024-08-08T02:42:28.625Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=101780890326179&w=2 http://www.kb.cert.org/vuls/id/596387 http://www.xiph.org/archives/icecast/2616.html http://www.securityfocus.com/bid/4415 http://marc.info/?l=bugtraq&m=101786838300906&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1083`	vulnerable	2026-06-08 04:45:21.417768	Details available Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash). Published: 2002-06-25T04:00:00.000Z Updated: 2024-08-08T04:44:07.420Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2002-063.html http://www.debian.org/security/2001/dsa-089 http://www.securityfocus.com/archive/1/193516 https://exchange.xforce.ibmcloud.com/vulnerabilities/6751 http://www.icecast.org/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0784`	vulnerable	2026-06-08 04:45:20.807959	Details available Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack using encoded URL characters. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-08T04:30:06.240Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2002-063.html http://www.debian.org/security/2001/dsa-089 http://www.redhat.com/support/errata/RHSA-2001-105.html http://www.securityfocus.com/bid/2932 https://exchange.xforce.ibmcloud.com/vulnerabilities/6752	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0197`	vulnerable	2026-06-08 04:45:19.887412	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.