Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Shoutcast_server | Nullsoft | 1.9.7 (including) | 1.9.7 (including) |