Realserver Security Vulnerabilities

CVE-1999-1369

Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.

CVE-2000-0001

RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.

CVE-2000-0185

RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.

CVE-2000-0272

RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.

CVE-2000-0474

Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory.

CVE-2000-1181

Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admin/includes/ URL.

CVE-2003-0725

Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.