PeerCast: Buffer overflow

PeerCast: Buffer overflow PeerCast is vulnerable to a buffer overflow that may lead to the execution of arbitrary code. peercast 2006-03-21 2006-03-21 123432 remote 0.1217 0.1217

PeerCast is a Peer to Peer broadcasting technology for listening to radio and watching video on the Internet.

INFIGO discovered a problem in the URL handling code. Buffers that are allocated on the stack can be overflowed inside of nextCGIarg() function.

By sending a specially crafted request to the HTTP server, a remote attacker can cause a stack overflow, resulting in the execution of arbitrary code.

There is no known workaround at this time.

All PeerCast users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=media-sound/peercast-0.1217"

CVE-2006-1148 koon DerCorny adir