CVE-2004-1373

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

70.07%

Published

Dec 23, 2004

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBSHOUTcast DNAS/Linux 1.9.4 - Format String Remote Overflow Exploit-DBSHOUTcast 1.9.4 (Windows) - File Request Format String Remote Overflow Exploit-DBSHOUTcast DNAS/Win32 1.9.4 - File Request Format String Overflow (Metasploit)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.

Affected Products (3)

nullsoft · shoutcast_servervulnerable

References (12)

http://marc.info/?l=bugtraq&m=110382975516003&w=2

http://marc.info/?l=bugtraq&m=110886444014745&w=2

http://securitytracker.com/id?1012675

http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml

Patch

http://www.securityfocus.com/bid/12096

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18669

http://marc.info/?l=bugtraq&m=110382975516003&w=2

http://marc.info/?l=bugtraq&m=110886444014745&w=2

http://securitytracker.com/id?1012675

http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml

Patch

http://www.securityfocus.com/bid/12096

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18669

KEV Catalog EPSS Scores Vendors All CVEs