CVE-1999-1369

Real Media RealServer (rmserver) version 6.0.3.353 stores the password in plaintext in world-readable rmserver.cfg, enabling local privilege escalation. The vulnerability arises from a plaintext password in a configuration file that is world-readable, which allows local users to obtain credential...