Lucene search
HistoryApr 22, 2003 - 4:00 a.m.
CVE-2002-1470
cve-2002-1470
shoutcast
password security
local users
information security
7.1 High
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
21.0%
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nullsoft:shoutcast_server | nullsoft shoutcast server | eq | 1.8.9 |
7.1 High
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
21.0%
Related for CVE-2002-1470