CVE-1999-1561

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Aug 20, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-1561 is a vulnerability in the Nullsoft SHOUTcast server where the administrative password is stored in plaintext within the configuration file (sc_serv.conf). This issue exposes the password to local users, granting them the ability to elevate their privileges to administrative level on the affected server. An attacker who exploits this vulnerability can make significant changes to the server configuration or install malicious software, potentially leading to data breaches or unauthorized access. It's crucial for organizations utilizing SHOUTcast servers to ensure proper access controls and secure their configuration files to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share