CVE-2002-1982

Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-c3fg-g4vp-22qm

Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote...

References (6)

• http://www.iss.net/security_center/static/9530.php
• http://www.securityfocus.com/archive/82/281274
• http://www.securityfocus.com/bid/5189 Exploit
• http://www.iss.net/security_center/static/9530.php
• http://www.securityfocus.com/archive/82/281274
• http://www.securityfocus.com/bid/5189 Exploit