Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or (backward slash).
Name | Vendor | Start Version | End Version |
---|---|---|---|
Icecast | Icecast | 1.0.0 | 1.0.0 |
Icecast | Icecast | 1.3.7 | 1.3.7 |
Icecast | Icecast | 1.3.8_beta2 | 1.3.8_beta2 |