CVE-2006-3535

Published: Jul 12, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.7 allows remote attackers to read arbitrary files via unspecified vectors that are a "slight variation" of CVE-2006-3534.

Affected (2)

Products: Nullsoft: Shoutcast Dsp

Nullsoft

1 product

Shoutcast Dsp

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Nullsoft Shoutcast Dsp	Version 1.9.5
Nullsoft Shoutcast Dsp	Version 1.9.6

References (12)

http://bugs.gentoo.org/show_bug.cgi?id=136721

Source: cve@mitre.org

Exploit

http://people.ksp.sk/~goober/advisory/001-shoutcast.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20524

Source: cve@mitre.org

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200607-05.xml

Source: cve@mitre.org

Patch

http://securitytracker.com/id?1016493

Source: cve@mitre.org

http://www.shoutcast.com/#news

Source: cve@mitre.org

Patch

http://bugs.gentoo.org/show_bug.cgi?id=136721