Remote Code Injection Vulnerability in Icecast by Xiph.Org

CVE-2011-4612

What is CVE-2011-4612?

The Icecast web streaming server, prior to version 2.3.3, is susceptible to a remote code injection vulnerability. This issue arises when an attacker crafts a malicious URL that allows them to inject control characters into the error log file (error.log). Such injection could manipulate the logging process, potentially leading to an exploit of additional vulnerabilities or disruption of services associated with Icecast. It is crucial for users of affected versions to update to the latest release to secure their systems against possible exploitation.

References