Detections
Analytics

FreeBSD : shoutcast -- XSS, information exposure (67dbe99f-0f09-11db-94f8-00e029485e38)

medium Nessus Plugin ID 22040

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

Goober's advisory reports reports that shoutcast is vulnerable to an arbitrary file reading vulnerability :

Impact of the vulnerability depends on the way the product was installed. In general, the vulnerability allows the attacker to read any file which can be read by the Shoutcast server process.

Solution

Update the affected packages.

See Also

https://people.ksp.sk/~goober/advisory/001-shoutcast.html

http://www.nessus.org/u?9a97c1a6

Plugin Details

Severity: Medium

ID: 22040

File Name: freebsd_pkg_67dbe99f0f0911db94f800e029485e38.nasl

Version: 1.15

Type: local

Published: 7/13/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.7

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:linux-shoutcast, cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:shoutcast

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 7/11/2006

Vulnerability Publication Date: 6/9/2006

Reference Information

CVE: CVE-2006-3007

Secunia: 20524