Description
jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log directory configuration field. Attackers can paste a buffer of 5000 characters into the Log directory input, then click Start to trigger a crash that terminates the server process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jetaudio | jetCast Server | 2.0 | — |
References
- ExploitDB-46819 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: jetCast Server 2.0 Denial of Service via Log Directory third-party-advisory