Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Icecast Server远程目录遍历漏洞
Vulnerability Description
Icecast是一款免费开放源代码的音频流服务程序，可使用在多种Unix/Linux操作系统平台下，也可以使用在Microsoft Windows操作系统下。 Icecast服务程序对用户提交的输入缺少正确充分的检查，远程攻击者可以利用这个漏洞进行目录遍历攻击。 Icecast服务程序中的list_directory()函数对用户提交的请求缺少充分的过滤，远程攻击者可以提交包含多个'../'字符的URL请求，可导致以Icecast进程的权限查看系统中任意文件内容。
CVSS Information
N/A
Vulnerability Type
N/A