exploitDog

CVE-2011-4612

Опубликовано: 20 нояб. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html
Third Party Advisory
http://www.icecast.org/
Patch
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=768176
Issue Tracking
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html
Third Party Advisory
http://www.icecast.org/
Patch
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=768176
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:xiph:icecast:*:*:*:*:*:*:*:*

Версия до 2.3.2 (включая)

EPSS

Процентиль: 81%

0.02199

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-4612

ubuntu

больше 13 лет назад

icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.

CVE-2011-4612

debian

больше 13 лет назад

icecast before 2.3.3 allows remote attackers to inject control charact ...

GHSA-66c2-mp25-238j

github

больше 4 лет назад

icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.

EPSS

Процентиль: 81%

0.02199

Низкий

5 Medium

CVSS2

Дефекты

CWE-20