Nullsoft SHOUTcast Multiple HTML Injection Vulnerabilities

Bugtraq ID:	18376
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 12 2006 12:00AM
Updated:	Jul 11 2006 07:13PM
Credit:	UZUZZ is credited with the discovery of these vulnerabilities.
Vulnerable:	NullSoft Shoutcast Server 1.9.5 Win32 NullSoft Shoutcast Server 1.9.5 Mac OS X NullSoft Shoutcast Server 1.9.5 Linux NullSoft Shoutcast Server 1.9.4 Win32 NullSoft Shoutcast Server 1.9.4 Mac OS X NullSoft Shoutcast Server 1.9.4 Linux + Gentoo Linux NullSoft Shoutcast Server 1.9.2 Win32 NullSoft Shoutcast Server 1.8.9 Win32 NullSoft Shoutcast Server 1.8.9 Solaris NullSoft Shoutcast Server 1.8.9 Mac OS X NullSoft Shoutcast Server 1.8.9 Linux NullSoft Shoutcast Server 1.8.9 FreeBSD NullSoft Shoutcast Server 1.8.3 Win32 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 NullSoft Shoutcast Server 1.7.1 Linux Gentoo media-sound/shoutcast-server-bin 1.9.6
Not Vulnerable:

Nullsoft SHOUTcast Multiple HTML Injection Vulnerabilities

Nullsoft SHOUTcast is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

These issues affect version 1.9.5; other versions may also be vulnerable.

Nullsoft SHOUTcast Multiple HTML Injection Vulnerabilities

An attacker can exploit these issues using the SHOUTcast DSP Plug-in for Winamp.

Nullsoft SHOUTcast Multiple HTML Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

Please see the reference section for advisories.

Nullsoft SHOUTcast Multiple HTML Injection Vulnerabilities

References:

• Shoutcast Homepage (Nullsoft)