CVE-1999-1561: High severity NullSoft Shoutcast Server vulnerability
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (scserv.conf), which could allow a local user to gain administrative privileges on the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove the plaintext administrative password from sc_serv.conf. Do not store the admin password in plaintext; if the product supports hashed or encrypted credential storage, configure that instead, otherwise avoid persisting the administrative password in the file.
Nullsoft SHOUTcast Server (sc_serv.conf) admin password storage = do not store in plaintext - Compensating control
Restrict access to sc_serv.conf and the server host to trusted administrative accounts only — e.g., tighten filesystem permissions so only administrators can read the config file and limit local user accounts that can log in to the server.
- Operational
Rotate the administrative password after removing plaintext storage or if there is any possibility it was exposed, to ensure any previously exposed credentials are invalidated.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1561?
CVE-1999-1561 has a medium severity rating due to the risk of local users gaining unauthorized administrative access.
How do I fix CVE-1999-1561?
To fix CVE-1999-1561, secure the configuration file by encrypting the administrative password or restricting access to the sc_serv.conf file.
Who is affected by CVE-1999-1561?
CVE-1999-1561 affects users of Nullsoft SHOUTcast Server version 1.9.7 running on Windows.
What could an attacker do with CVE-1999-1561?
An attacker could gain administrative privileges on the SHOUTcast server, allowing them to alter settings or gain complete control.
Is there a workaround for CVE-1999-1561?
A workaround for CVE-1999-1561 includes changing file permissions to limit access to the sc_serv.conf file.