Security Advisory
CVE-2002-1982
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not.