Vulnerability in Icecast

CVE-2001-1083

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).

EPSS: 0.096 (95.0th percentile) — read the EPSS interpretation.

Affected products

  • Icecast — versions 1.0.0, 1.3.7, 1.3.8_beta2
  • N/a — versions n/a

References