Shoutcast Server
Approved changes feed: RSS · Atom
cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:*:*:*:*:*:*
part: a version: 1.8.9 update: *
| Vendor | Nullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7) |
|---|---|
| Product | Shoutcast Server (ad3d973c-84ea-5dc8-967a-4a5a56b7c203) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-3534 |
vulnerable | 2026-06-08 04:49:09.592116 |
Details available
Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".
Published: 2006-07-12T21:00:00.000Z
Updated: 2024-08-07T18:30:34.341Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1470 |
vulnerable | 2026-06-08 04:46:23.805930 |
Details available
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.
Published: 2003-03-18T05:00:00.000Z
Updated: 2024-08-08T03:26:28.646Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.