CVE-2002-0177

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101780890326179&w=2
http://marc.info/?l=bugtraq&m=101786838300906&w=2
http://marc.info/?l=bugtraq&m=101793704306035&w=2
http://www.kb.cert.org/vuls/id/596387US Government Resource
http://www.securityfocus.com/bid/4415
http://www.xiph.org/archives/icecast/2616.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=101780890326179&w=2
http://marc.info/?l=bugtraq&m=101786838300906&w=2
http://marc.info/?l=bugtraq&m=101793704306035&w=2
http://www.kb.cert.org/vuls/id/596387US Government Resource
http://www.securityfocus.com/bid/4415
http://www.xiph.org/archives/icecast/2616.htmlPatch, Vendor Advisory

Timeline

Published: Apr 22, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-01787.2uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symboli CVE-2002-01797.5Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.CVE-2002-01807.5Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by conne CVE-2002-01817.5Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and CVE-2002-01847.8Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privi CVE-2002-01857.5mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which CVE-2002-01867.5Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data querie CVE-2002-01877.5Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via t CVE-2002-01887.5Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type CVE-2002-01897.5Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL CVE-2002-01907.5Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malf CVE-2002-01915.0Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script cont