mt-daapd DAAP audio server vulnerabilities

First of all don't forget to keep your server patched.

# apt-get update
# apt-get upgrade
Three Vulnerabilities on Firefly Media Server ( mt-daapd DAAP audio server).

1. HTTP header enables a heap buffer overflow, potentially enabling the execution of arbitrary code.

2. Format string vulnerabilities in debug logging within the authentication of XML-RPC requests could enable the execution of arbitrary code.

3. An integer overflow weakness in the handling of HTTP POST variables could allow a heap buffer overflow and potentially arbitrary code execution.

You should consider to secure your system :-)

0 Comments: