Unscored CVE-2002-1470 EUVD-2002-1453GHSA-qv4w-fx8x-hpw4

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes…

Published Mar 18, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.

References

5414 vdb-entry
shoutcast-scservlog-world-readable(9775) vdb-entry
20020806 Fate Research Labs Advisory: Retrieve SHOUTcast Admin Password Through GET / mailing-list