PT-1999-1689 · Realnetworks · Realserver

Published 1999-04-14 · Updated 2016-10-18 · CVE-1999-1369

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: RealServer version 6.0.3.353

Description: The issue concerns the storage of a password in plaintext within a configuration file. Specifically, the rmserver.cfg file is world-readable and contains a password in plaintext, allowing local users to gain privileges.

Recommendations: For version 6.0.3.353, consider restricting access to the rmserver.cfg file to prevent local users from reading the plaintext password. As a temporary workaround, limit the privileges of local users to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1369

Affected Products

Realserver

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1369 · Security Note
• http://marc.info/?l=bugtraq&m=92411181619110&w=2 · Note