CVE-2006-3124

Streamripper <1.61.26 - RCE/DoS

Title source: llm

Description

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.

Exploits (2)

exploitdb WORKING POC VERIFIED

by psylocn · cremotewindows

https://www.exploit-db.com/exploits/2277

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Expanders · cremotelinux

https://www.exploit-db.com/exploits/2274

View Code ZIP pw:eip

References (13)

[Third Party Advisory] http://secunia.com/advisories/21749

[Patch] http://sourceforge.net/project/shownotes.php?release_id=442126

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1158

[Patch, Vendor Advisory] http://secunia.com/advisories/21579

[Third Party Advisory] http://secunia.com/advisories/21658

[Third Party Advisory] http://secunia.com/advisories/21801

[Patch] http://www.securityfocus.com/bid/19707

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2006_21_sr.html

[Third Party Advisory, VDB Entry] http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-200609-01.xml

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/3387

[Third Party Advisory, VDB Entry] http://www.osvdb.org/28178

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/28567

Scores

EPSS 0.3946

EPSS Percentile 97.3%

Details

Status published

Products (2)

streamripper/streamripper 1.61.24

streamripper/streamripper 1.61.25

Published Aug 26, 2006

Tracked Since Feb 18, 2026