https://www.exploit-db.com/exploits/20973
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200106-118

HTTP服务器文件流支持生效的Icecast1.3.11之前的1.3.7和其他版本存在漏洞。远程攻击者可以借助以.(点)，/(分隔符)，或(反斜线)结尾的URL导致服务拒绝（崩溃）。

source: http://www.securityfocus.com/bid/2933/info

Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems.

Icecast does not sufficiently sanitize user-supplied input, or sanely handle unexpected input. Upon receiving a request from a user for a file that ends with a slash or period, the server will crash. The behaviour occurs when the remote attacker adds an '/', '' or '.' to the end the URL they craft to request the file. The request of an existing file is not necessary, as the Icecast server will fail regardless. 

http://localhost:8000/file//

NOTE: File is interpreted by Icecast as the 'root' directory and anything after 'file/' indicates the file request. The character '/' triggers the denial of service.

来源:XF
名称:icecast-http-remote-dos(6751)
链接:http://xforce.iss.net/static/6751.php
来源:BID
名称:2933
链接:http://www.securityfocus.com/bid/2933
来源:BUGTRAQ
名称:20010626Advisory
链接:http://www.securityfocus.com/archive/1/193516
来源:www.icecast.org
链接:http://www.icecast.org/releases/icecast-1.3.11.tar.gz
来源:www.icecast.org
链接:http://www.icecast.org/index.html
来源:REDHAT
名称:RHSA-2002:063
链接:http://www.redhat.com/support/errata/RHSA-2002-063.html
来源:REDHAT
名称:RHSA-2001:105
链接:http://www.redhat.com/support/errata/RHSA-2001-105.html
来源:DEBIAN
名称:DSA-089
链接:http://www.debian.org/security/2001/dsa-089
来源:CALDERA
名称:CSSA-2002-020.0
链接:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-020.0.txt