Gentoo has acknowledged some vulnerabilities mt-daapd, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

1) An error within the processing of certain headers in webserver.c can be exploited to crash an affected daemon by sending specially crafted authentication headers.

2) A format string error exists within the "ws_dispatcher()" function in webserver.c. This can be exploited to crash an affected daemon or potentially execute arbitrary code by sending specially crafted authentication headers containing format specifiers.

Solution
Update to "media-sound/mt-daapd-0.2.4.1" or later.

Provided and/or discovered by
nnp

Original Advisory
http://www.gentoo.org/security/en/glsa/glsa-200712-18.xml

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers