Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Icecast |
Icecast |
* |
2.3.3 (including) |
References