Unrated severityNVD Advisory· Published May 2, 2005· Updated Jun 16, 2026
CVE-2005-0837
CVE-2005-0837
Description
IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).
Affected products
7cpe:2.3:a:icecast:icecast:2.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:icecast:icecast:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:icecast:icecast:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:icecast:icecast:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:icecast:icecast:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:icecast:icecast:2.2:*:*:*:*:*:*:*
- (no CPE)range: =2.20
Patches
Vulnerability mechanics
References
5- securitytracker.com/idnvdExploit
- www.securityfocus.com/archive/1/393705nvdExploit
- www.securityfocus.com/bid/12849nvdExploit
- secunia.com/advisories/14644nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/19760nvd
News mentions
0No linked articles in our index yet.