PT-1999-1689 · Realnetworks · Realserver

Publicado

1999-04-14

·

Atualizado

2016-10-18

·

CVE-1999-1369

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: RealServer version 6.0.3.353
Description: The issue concerns the storage of a password in plaintext within a configuration file. Specifically, the rmserver.cfg file is world-readable and contains a password in plaintext, allowing local users to gain privileges.
Recommendations: For version 6.0.3.353, consider restricting access to the rmserver.cfg file to prevent local users from reading the plaintext password. As a temporary workaround, limit the privileges of local users to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-1999-1369

Produtos afetados

Realserver