Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Icecast | Icecast | 1.3.12 (including) | 1.3.12 (including) |