SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-9018

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

BID-71312

MDVSA-2014:231

http://www.openwall.com/lists/oss-security/2014/11/19/23

http://www.openwall.com/lists/oss-security/2014/11/20/22

http://icecast.org/news/icecast-release-2_4_1/

https://trac.xiph.org/ticket/2087

https://trac.xiph.org/ticket/2089

icecast-cve20149091-priv-esc(98991)

openSUSE-SU-2014:1593


30479



423868



249622



909



195549



282