low2.1
CVE-2002-1470
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be …
Impact
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nullsoft | Shoutcast Server | Version 1.8.9 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0017.html
- http://www.iss.net/security_center/static/9775.php
- http://www.securityfocus.com/bid/5414
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0017.html
- http://www.iss.net/security_center/static/9775.php
- http://www.securityfocus.com/bid/5414