CVE-2014-9018

Published: Dec 3, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.

Affected (1)

Products: Icecast: Icecast

Icecast

1 product

Icecast

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Icecast Icecast	Up to 2.4.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

http://icecast.org/news/icecast-release-2_4_1/

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2014-12/msg00038.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2014:231

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/11/19/23

Source: cve@mitre.org

Exploit

http://www.openwall.com/lists/oss-security/2014/11/20/22

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/71312

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/98991

Source: cve@mitre.org

https://trac.xiph.org/ticket/2087

Source: cve@mitre.org

Exploit

https://trac.xiph.org/ticket/2089

Source: cve@mitre.org

http://icecast.org/news/icecast-release-2_4_1/