CVE-2006-3535

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-12 · updated 2026-06-16

Description

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.7 allows remote attackers to read arbitrary files via unspecified vectors that are a "slight variation" of CVE-2006-3534.

Affected products

Nullsoft Shoutcast Dsp: 1.9.5, 1.9.6

References

http://bugs.gentoo.org/show_bug.cgi?id=136721
http://people.ksp.sk/~goober/advisory/001-shoutcast.html
http://secunia.com/advisories/20524
http://security.gentoo.org/glsa/glsa-200607-05.xml
http://securitytracker.com/id?1016493
http://www.shoutcast.com/#news
http://bugs.gentoo.org/show_bug.cgi?id=136721
http://people.ksp.sk/~goober/advisory/001-shoutcast.html
http://secunia.com/advisories/20524
http://security.gentoo.org/glsa/glsa-200607-05.xml
http://securitytracker.com/id?1016493
http://www.shoutcast.com/#news

Get alerted when CVE-2006-3535 or the next vulnerability affects your stack