CVE-2006-3534

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".

• http://bugs.gentoo.org/show_bug.cgi?id=136721
• http://people.ksp.sk/~goober/advisory/001-shoutcast.htmlExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/20524Exploit, Patch, Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200607-05.xmlExploit, Patch
• http://securitytracker.com/id?1016493
• http://www.shoutcast.com/#newsPatch
• http://www.vupen.com/english/advisories/2006/2801
• http://bugs.gentoo.org/show_bug.cgi?id=136721
• http://people.ksp.sk/~goober/advisory/001-shoutcast.htmlExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/20524Exploit, Patch, Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200607-05.xmlExploit, Patch
• http://securitytracker.com/id?1016493
• http://www.shoutcast.com/#newsPatch
• http://www.vupen.com/english/advisories/2006/2801

Published

Jul 12, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3528Multiple PHP remote file inclusion vulnerabilities in Simple…
• CVE-2006-3529Memory leak in Juniper JUNOS 6.4 through 8.0, built before M…
• CVE-2006-3530PHP remote file inclusion vulnerability in com_pccookbook/pc…
• CVE-2006-3531includes/editor/insert_image.php in Pivot 1.30 RC2 and earli…
• CVE-2006-3532PHP file inclusion vulnerability in includes/edit_new.php in…
• CVE-2006-3533Multiple cross-site scripting (XSS) vulnerabilities in Pivot…
• CVE-2006-3535Directory traversal vulnerability in Nullsoft SHOUTcast DSP …
• CVE-2006-3536Direct static code injection vulnerability in code/class_db_…
• CVE-2006-3537PHP remote file inclusion vulnerability in index.php in Rand…
• CVE-2006-3538Multiple cross-site scripting (XSS) vulnerabilities in demo.…
• CVE-2006-3539Multiple cross-site scripting (XSS) vulnerabilities in DKScr…
• CVE-2006-3540Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.…