Privilege Escalation in Icecast before 2.4.0

CVE-2014-9091

Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.

Learn more about our User Device Pen Test.