Nullsoft SHOUTCast Remote Buffer Overflow Vulnerability

Bugtraq ID:	4934
Class:	Boundary Condition Error
CVE:	CVE-2002-0907
Remote:	Yes
Local:	No
Published:	Jun 04 2002 12:00AM
Updated:	Jul 11 2009 01:56PM
Credit:	Discovered by eSDee <[email protected]>.
Vulnerable:	NullSoft Shoutcast Server 1.8.9 Win32 NullSoft Shoutcast Server 1.8.9 Solaris NullSoft Shoutcast Server 1.8.9 Mac OS X NullSoft Shoutcast Server 1.8.9 Linux NullSoft Shoutcast Server 1.8.9 FreeBSD
Not Vulnerable:

Nullsoft SHOUTCast Remote Buffer Overflow Vulnerability

Nullsoft SHOUTcast Server is used to broadcast Shoutcast music. SHOUTcast Server is available for Windows, Linux and a number of other Unix based platforms.

A remote buffer overflow vulnerability has been reported in some versions of SHOUTCast Server. An authenticated DJ may supply oversized data to the server, which will then overflow a memory buffer. Execution of arbitrary code is reported to be possible.

This vulnerability has been confirmed on SHOUTCast Server for Windows, FreeBSD and Linux. Mac OS X and Solaris may also be vulnerable, this has not however been confirmed.

Nullsoft SHOUTCast Remote Buffer Overflow Vulnerability

eSDee <[email protected]> has provided an exploit for Linux based servers:

• /data/vulnerabilities/exploits/mayday-linux.c

Nullsoft SHOUTCast Remote Buffer Overflow Vulnerability

Solution:
Reportedly, this issue will be resolved in release 1.8.12 of the SHOUTCast Server.

Nullsoft SHOUTCast Remote Buffer Overflow Vulnerability

References:

• Shoutcast Homepage (Nullsoft)