CVE-2002-1470 describes a vulnerability in SHOUTcast Server versions 1.8.9 and earlier, where a local attacker can retrieve the cleartext administrative password. This occurs when a GET request to port 8001 causes the password to be logged in the world-readable sc_serv.log file. The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating local access is required for a partial confidentiality impact. There is no evidence of active exploitation, nor are there known public exploits in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.8.9CPE matchmatch criteria | cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.