Remote Root exploit in stable icecast-server package
Hi All,
I have been considering changing our RealAudio broadcasts (on a NT box) over
to a linux box and have decided to go with a icecast server.
However, I noticed that the stable package is version 1.00. Version 1.3.8b2
and prior have a remote vunerability to execute code as the particular
UID/GID that the icecast-server is running, which, forgive me if I'm wrong,
appears to be root!
I cannot find and security advisories on this matter either!
Can we get the package fixed or at least the stable packeage removed?
The woody package has been fixed, and the server runs as a user "icecast"
instead of root.
Andrew Tait
System Administrator
Country NetLink Pty, Ltd
E-Mail: andrewt@cnl.com.au
WWW: http://www.cnl.com.au
30 Bank St Cobram, VIC 3644, Australia
Ph: +61 (03) 58 711 000
Fax: +61 (03) 58 711 874
"It's the smell! If there is such a thing." Agent Smith - The Matrix
Reply to: