Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:mac_os_x:*:*:*:*:*

part: a version: 1.8.9 update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductShoutcast Server (ad3d973c-84ea-5dc8-967a-4a5a56b7c203)
Editionmac_os_x
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3534 vulnerable 2026-06-08 04:49:09.592219 Details available
Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".
Published: 2006-07-12T21:00:00.000Z
Updated: 2024-08-07T18:30:34.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3007 vulnerable 2026-06-08 04:49:08.034141 Details available
Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.
Published: 2006-06-13T10:00:00.000Z
Updated: 2024-08-07T18:16:05.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0907 vulnerable 2026-06-08 04:46:22.503787 Details available
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:03:49.301Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.