CVE-2006-3534: High severity NullSoft Shoutcast Server vulnerability
Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3534?
CVE-2006-3534 is considered a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2006-3534?
To fix CVE-2006-3534, upgrade Nullsoft SHOUTcast DSP to version 1.9.6 or later, which includes proper input validation.
What causes CVE-2006-3534?
CVE-2006-3534 is caused by a directory traversal vulnerability that allows attackers to exploit unfiltered HTTP GET requests.
Which versions of Nullsoft SHOUTcast are affected by CVE-2006-3534?
CVE-2006-3534 affects Nullsoft SHOUTcast DSP versions prior to 1.9.6, including multiple earlier versions.
Can CVE-2006-3534 lead to data breaches?
Yes, CVE-2006-3534 can lead to data breaches if exploited, as it allows unauthorized access to arbitrary files on the server.