CVE-2002-0907: Buffer Overflow
Published Aug 31, 2002
·Updated
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
Affected Software
5 affected components
NullSoft Shoutcast Server=1.8.9
NullSoft Shoutcast Server=1.8.9
NullSoft Shoutcast Server=1.8.9
NullSoft Shoutcast Server=1.8.9
NullSoft Shoutcast Server=1.8.9
Remediation
Patch Available
Patch Available
Event History
Aug 31, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0907?
CVE-2002-0907 is considered a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2002-0907?
The recommended fix for CVE-2002-0907 is to upgrade the SHOUTcast server to version 1.8.12 or later.
3
What impact does CVE-2002-0907 have on systems?
CVE-2002-0907 can allow an authenticated remote DJ to execute arbitrary code on the server, potentially compromising the system.
4
Which versions of SHOUTcast are affected by CVE-2002-0907?
CVE-2002-0907 affects SHOUTcast version 1.8.9 and earlier versions.
5
Is CVE-2002-0907 a local or remote vulnerability?
CVE-2002-0907 is a remote vulnerability, as it can be exploited over the network by an authenticated user.