[icecast] (Fwd) [SA11578] Icecast Basic Authorization Denial of Service

[oddsock]

This issue was identified about a month ago and a fix (by Mike) is 
currently in SVN...it would probably make sense to do a patch release, or 
even better, expedite the 2.1 release.

oddsock
At 09:35 AM 5/12/2004, you wrote:
> > Anybody from the core can tell about the background and possible
> > fixes?
>
> > TITLE:
> > Icecast Basic Authorization Denial of Service Vulnerability
>
>I'm all for full and immediate disclosure, but I feel like these people
>should at least send us a Cc: on these announcements.  Isn't the point
>to get us to fix them? :)
>
>In any case, this is probably an easy fix.
>
>jack.
>--- >8 ----
>List archives:  http://www.xiph.org/archives/
>icecast project homepage: http://www.icecast.org/
>To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
>containing only the word 'unsubscribe' in the body.  No subject is needed.
>Unsubscribe messages sent to the list will be ignored/filtered.

<p>--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.