CVE Catalog
CVE-1999-1369
MediumExploitation Probability (EPSS)
Elevated risk0.88%
54th percentile - higher than 54% of all known CVEs
Summary
Real Media RealServer version 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, allowing local users to gain elevated privileges.
Risk Assessment
Storing passwords in plaintext poses a serious security risk as local users can access sensitive data and functions.
Recommendation
It is recommended to secure the configuration file by encrypting passwords and restricting access to the file to authorized users.
Original NVD description (English source)
Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.