CVE-2006-3534

Description

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".

Primary references

• cve@mitre.org
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Patch
• cve@mitre.org
• cve@mitre.org — Patch
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch
• af854a3a-2127-422b-91ae-364da2661108