Test ID:	1.3.6.1.4.1.25623.1.0.57078
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: shoutcast, linux-shoutcast
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: shoutcast linux-shoutcast CVE-2006-3007 Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3007 BugTraq ID: 18376 http://www.securityfocus.com/bid/18376 Bugtraq: 20060608 bug of script injection in shoutcast servers (Google Search) http://marc.info/?l=bugtraq&m=114980135615062&w=2 http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml http://secunia.com/advisories/20524 http://secunia.com/advisories/21005 http://www.vupen.com/english/advisories/2006/2254 XForce ISS Database: shoutcast-djfields-xss(27129) https://exchange.xforce.ibmcloud.com/vulnerabilities/27129
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.