Local Users Can Access Cleartext Admin Password in SHOUTcast
CVE-2002-1470

Currently unrated

Key Information:

Vendor: Nullsoft
Status: Shoutcast Server
Vendor: CVE Published:; 22 April 2003

What is CVE-2002-1470?

The vulnerability in SHOUTcast versions 1.8.9 and earlier allows local users to retrieve the administrative password in cleartext by sending a GET request to port 8001. This sensitive information is logged in the sc_serv.log file, which is world-readable, thereby exposing it to unauthorized users. Proper safeguards and access restrictions should be implemented to prevent such leakage.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch