Icecast Server Directory Traversal Information Disclosure Vulnerability

Bugtraq ID:	5189
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 09 2002 12:00AM
Updated:	Jul 09 2002 12:00AM
Credit:	Reported by [email protected].
Vulnerable:	Icecast Icecast 1.3.12 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Server 3.1
Not Vulnerable:

Icecast Server Directory Traversal Information Disclosure Vulnerability

Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms.

An attacker may exploit a directory traversal vulnerability in Icecast server to determine the existance of a specified directory outside of the web root. This is a result of the server returning different HTTP results for each case.

This issue may be related to a more severe directory traversal issue in earlier versions of Icecast, documented as BID 2932.

Icecast Server Directory Traversal Information Disclosure Vulnerability

No exploit is required. The following HTTP examples may be submitted through telnet:

GET /file/../../../../../../../../nonexistent/ HTTP/1.0

GET /file/../../../../../../../../etc/ HTTP/1.0

Icecast Server Directory Traversal Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Icecast Server Directory Traversal Information Disclosure Vulnerability

References:

• BID 2932: Icecast Directory Traversal Vulnerability (SecurityFocus)
  
• Icecast Homepage (Icecast)
  
• VANED LABS: icecast filesystem disclosure ([email protected])