We have found numerous remotely exploitable buffer overflows in both Icecast and Libshout, two popular packages for streaming audio. All users of these packages are urged to upgrade immediately. Patched versions of these packages are available as of March 11, 2001 from www.icecast.org. All versions prior to Icecast 1.3.9 and Libshout 1.0.4 are vulnerable. Matt Messier ([EMAIL PROTECTED]) John Viega ([EMAIL PROTECTED])