CVE-2004-2451
Roger Wilco 1.4.1.6 and earlier - Unauthenticated Audio Channel Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2451. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary The vulnerability in Roger Wilco Server allows an attacker to transmit unauthorized UDP audio streams to a channel without authenticating via TCP. The attacker only needs knowledge of user IDs (0-127) to broadcast audio, which cannot be muted or disconnected by the server administrator.
Description
Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to arbitrary channels, aka the "Voices from the deep" bug.
Exploits (1)
The vulnerability in Roger Wilco Server allows an attacker to transmit unauthorized UDP audio streams to a channel without authenticating via TCP. The attacker only needs knowledge of user IDs (0-127) to broadcast audio, which cannot be muted or disconnected by the server administrator.