• info
• discussion
• exploit
• solution
• references

Icecast print_client() Format String Vulnerability

Versions of icecast up to and including 1.3.8 beta2 exhibit a format string vulnerability in the print_client()function of utility.c. A malicious user can cause the *printf function to overwrite memory at possibly arbitrary addresses.